RE: [Declude.Virus] [IMail Forum] Issues Using IMail 8.22 To Send Messages From Web Server
Kami, Thanks for the info, but this is a separate issue as these have no HTML in them. There is also nothing in the Declude logs for these messages. I am not positive it is Declude, but I have not had an issue since I disabled Declude Virus on Friday afternoon, so it is looking more and more like it could be. Thanks, Grant Griffith Web Application Developer Enhanced Telecommunications Corp. (812)932-1000 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kami Razvan Sent: Monday, March 20, 2006 6:45 PM To: Declude.Virus@declude.com Subject: RE: [Declude.Virus] [IMail Forum] Issues Using IMail 8.22 To Send Messages From Web Server Hi Grant.. The problem is an issue we faced with as well. If you are sending HTML with fancy tags your emails are getting tagged as: -Virus: Possibly a new variant of JS/ -In: [HTML segment] We had all of our web messaging emails get caught as that virus. I changed the program to simply send an HTML without any tags other than BR for line break and it worked fine. We use ASPemail for 1 application and the problem started happening almost 2 or so weeks ago. All is fine now. Hope this helps. Kami -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Grant Griffith Sent: Monday, March 20, 2006 10:36 AM To: Declude.Virus@declude.com Subject: RE: [Declude.Virus] [IMail Forum] Issues Using IMail 8.22 To Send Messages From Web Server I will get a support ticket open with Declude, but just as an FYI, I disabled Declude Virus last Friday and have not seen this issue again since. Therefore it appears Declude Virus might be taking the message and then timing out for some reason. I am still watching all the emails coming from my web server, but the past 20+ have went thru fine since disabling Declude Virus. Thanks, Grant Griffith Web Application Developer Enhanced Telecommunications Corp. (812)932-1000 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Grant Griffith Sent: Friday, March 17, 2006 1:39 PM To: Declude.Virus@declude.com Subject: RE: [Declude.Virus] [IMail Forum] Issues Using IMail 8.22 To Send Messages From Web Server Well, I do have Declude running with F-Prot. I just checked those logs and there is nothing in there for that message which is really odd... Maybe this is a Declude Issue now?!?! Thanks, Grant Griffith Web Application Developer Enhanced Telecommunications Corp. (812)932-1000 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Matti Haack Sent: Friday, March 17, 2006 1:22 PM To: Grant Griffith - IMail Subject: Re: [IMail Forum] Issues Using IMail 8.22 To Send Messages From Web Server GGI Well, here is the ASPMail log for an email that did not go out and GGI then below it is the Imail logs showing it timing out... As the session in the ASP-Mail log is completed without problems - and the session in the Imail log is not, there must be some proxy (or Virusscanner, ASSP etc.) between the both. The 250 and 221 messages are created by the recieving SMTP-Server. I assume it is a virusscanner, which stops sending on the message during the scan... Just an Idea. Maybe I am wrong... Matti GGI ASPMAIL LOG GGI 220 ei8htlegs.net (IMail 8.22 95649-4) NT-ESMTP Server X1 GGI HELO mail.ei8htlegs.net GGI 250 hello ei8htlegs.net GGI MAIL FROM:[EMAIL PROTECTED] GGI 250 ok GGI RCPT TO:[EMAIL PROTECTED] GGI 250 ok its for [EMAIL PROTECTED] GGI RCPT TO:[EMAIL PROTECTED] GGI 250 ok its for [EMAIL PROTECTED] GGI DATA GGI 354 Please start mail input. GGI Message body suppressed. GGI . GGI 250 Mail queued for delivery. GGI QUIT GGI 221 Closing connection. Good bye. GGI /ASPMAIL LOG GGI Imail Log GGI 03:16 20:36 SMTPD(12ab015a43ee) [64.184.24.60] connect GGI 64.184.24.36 port GGI 2919 GGI 03:16 20:36 SMTPD(12ab015a43ee) [64.184.24.36] HELO GGI mail.ei8htlegs.net GGI 03:16 20:36 SMTPD(12ab015a43ee) [64.184.24.36] MAIL GGI FROM:[EMAIL PROTECTED] GGI 03:16 20:36 SMTPD(12ab015a43ee) [64.184.24.36] RCPT GGI TO:[EMAIL PROTECTED] GGI 03:16 20:36 SMTPD(12ab015a43ee) [64.184.24.36] RCPT GGI TO:[EMAIL PROTECTED] GGI 03:16 20:41 SMTPD(12ab015a43ee) connection timed out GGI /Imail Log GGI Thanks, GGI Grant Griffith GGI Web Application Developer GGI Enhanced Telecommunications Corp. GGI (812)932-1000 GGI -Original Message- GGI From: [EMAIL PROTECTED] GGI [mailto:[EMAIL PROTECTED] On Behalf Of Grant GGI Griffith - IMail GGI Sent: Tuesday, March 14, 2006 10:49 AM GGI To: Imail_Forum@list.ipswitch.com GGI Subject: RE: [IMail Forum] Issues Using IMail GGI 8.22 To Send Messages From Web GGI Server GGI OK, I have logging turned on now for the ASPMail side of things. GGI Just have GGI to watch for it to occur again and then look at what both sides said. GGI Thanks, GGI Grant Griffith GGI Web Application Developer GGI
RE: [Declude.Virus] [IMail Forum] Issues Using IMail 8.22 To Send Messages From Web Server
I will get a support ticket open with Declude, but just as an FYI, I disabled Declude Virus last Friday and have not seen this issue again since. Therefore it appears Declude Virus might be taking the message and then timing out for some reason. I am still watching all the emails coming from my web server, but the past 20+ have went thru fine since disabling Declude Virus. Thanks, Grant Griffith Web Application Developer Enhanced Telecommunications Corp. (812)932-1000 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Grant Griffith Sent: Friday, March 17, 2006 1:39 PM To: Declude.Virus@declude.com Subject: RE: [Declude.Virus] [IMail Forum] Issues Using IMail 8.22 To Send Messages From Web Server Well, I do have Declude running with F-Prot. I just checked those logs and there is nothing in there for that message which is really odd... Maybe this is a Declude Issue now?!?! Thanks, Grant Griffith Web Application Developer Enhanced Telecommunications Corp. (812)932-1000 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Matti Haack Sent: Friday, March 17, 2006 1:22 PM To: Grant Griffith - IMail Subject: Re: [IMail Forum] Issues Using IMail 8.22 To Send Messages From Web Server GGI Well, here is the ASPMail log for an email that did not go out and then GGI below it is the Imail logs showing it timing GGI out... As the session in the ASP-Mail log is completed without problems - and the session in the Imail log is not, there must be some proxy (or Virusscanner, ASSP etc.) between the both. The 250 and 221 messages are created by the recieving SMTP-Server. I assume it is a virusscanner, which stops sending on the message during the scan... Just an Idea. Maybe I am wrong... Matti GGI ASPMAIL LOG GGI 220 ei8htlegs.net (IMail 8.22 95649-4) NT-ESMTP Server X1 GGI HELO mail.ei8htlegs.net GGI 250 hello ei8htlegs.net GGI MAIL FROM:[EMAIL PROTECTED] GGI 250 ok GGI RCPT TO:[EMAIL PROTECTED] GGI 250 ok its for [EMAIL PROTECTED] GGI RCPT TO:[EMAIL PROTECTED] GGI 250 ok its for [EMAIL PROTECTED] GGI DATA GGI 354 Please start mail input. GGI Message body suppressed. GGI . GGI 250 Mail queued for delivery. GGI QUIT GGI 221 Closing connection. Good bye. GGI /ASPMAIL LOG GGI Imail Log GGI 03:16 20:36 SMTPD(12ab015a43ee) GGI [64.184.24.60] connect 64.184.24.36 port GGI 2919 GGI 03:16 20:36 SMTPD(12ab015a43ee) GGI [64.184.24.36] HELO mail.ei8htlegs.net GGI 03:16 20:36 SMTPD(12ab015a43ee) [64.184.24.36] MAIL GGI FROM:[EMAIL PROTECTED] GGI 03:16 20:36 SMTPD(12ab015a43ee) GGI [64.184.24.36] RCPT TO:[EMAIL PROTECTED] GGI 03:16 20:36 SMTPD(12ab015a43ee) [64.184.24.36] RCPT GGI TO:[EMAIL PROTECTED] GGI 03:16 20:41 SMTPD(12ab015a43ee) connection timed out GGI /Imail Log GGI Thanks, GGI Grant Griffith GGI Web Application Developer GGI Enhanced Telecommunications Corp. GGI (812)932-1000 GGI -Original Message- GGI From: [EMAIL PROTECTED] GGI [mailto:[EMAIL PROTECTED] On GGI Behalf Of Grant Griffith - GGI IMail GGI Sent: Tuesday, March 14, 2006 10:49 AM GGI To: Imail_Forum@list.ipswitch.com GGI Subject: RE: [IMail Forum] Issues Using IMail GGI 8.22 To Send Messages From Web GGI Server GGI OK, I have logging turned on now for the ASPMail GGI side of things. Just have GGI to watch for it to occur again and then look at what both sides said. GGI Thanks, GGI Grant Griffith GGI Web Application Developer GGI Enhanced Telecommunications Corp. GGI (812)932-1000 GGI -Original Message- GGI From: [EMAIL PROTECTED] GGI [mailto:[EMAIL PROTECTED] On Behalf Of Eric Shanbrom GGI Sent: Tuesday, March 14, 2006 10:41 AM GGI To: Imail_Forum@list.ipswitch.com GGI Subject: Re: [IMail Forum] Issues Using IMail GGI 8.22 To Send Messages From Web GGI Server GGI You are looking in the wrong direction. This is a GGI message coming into IMail GGI not going out to somewhere else. Since it hasn't GGI been accepted for delivery GGI by IMail there is nothing to re-queue and try GGI again.. the question here is GGI why didn't the conversation continue after the GGI final RCPT TO. Unfortunately, GGI we only see one side of the communication, that GGI being the commands coming GGI in. At this time I do not know if the sending GGI server got the final 250 OK GGI and didn't send the DATA command or what. The GGI connection timed out while GGI IMail was waiting for a new command. A sniffer on the line can give more GGI info and point you to the problem. GGI Eric S GGI - Original Message - GGI From: Adam Campbell [EMAIL PROTECTED] GGI To: Imail_Forum@list.ipswitch.com GGI Sent: Tuesday, March 14, 2006 10:26 AM GGI Subject: Re: [IMail Forum] Issues Using IMail GGI 8.22 To Send Messages From Web GGI Server There's no DATA command. Maybe ASPMail didn't like SMTPD's response to the second RCPT TO and didn't give a DATA
RE: [Declude.Virus] [IMail Forum] Issues Using IMail 8.22 To Send Messages From Web Server
Hi Grant.. The problem is an issue we faced with as well. If you are sending HTML with fancy tags your emails are getting tagged as: -Virus: Possibly a new variant of JS/ -In: [HTML segment] We had all of our web messaging emails get caught as that virus. I changed the program to simply send an HTML without any tags other than BR for line break and it worked fine. We use ASPemail for 1 application and the problem started happening almost 2 or so weeks ago. All is fine now. Hope this helps. Kami -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Grant Griffith Sent: Monday, March 20, 2006 10:36 AM To: Declude.Virus@declude.com Subject: RE: [Declude.Virus] [IMail Forum] Issues Using IMail 8.22 To Send Messages From Web Server I will get a support ticket open with Declude, but just as an FYI, I disabled Declude Virus last Friday and have not seen this issue again since. Therefore it appears Declude Virus might be taking the message and then timing out for some reason. I am still watching all the emails coming from my web server, but the past 20+ have went thru fine since disabling Declude Virus. Thanks, Grant Griffith Web Application Developer Enhanced Telecommunications Corp. (812)932-1000 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Grant Griffith Sent: Friday, March 17, 2006 1:39 PM To: Declude.Virus@declude.com Subject: RE: [Declude.Virus] [IMail Forum] Issues Using IMail 8.22 To Send Messages From Web Server Well, I do have Declude running with F-Prot. I just checked those logs and there is nothing in there for that message which is really odd... Maybe this is a Declude Issue now?!?! Thanks, Grant Griffith Web Application Developer Enhanced Telecommunications Corp. (812)932-1000 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Matti Haack Sent: Friday, March 17, 2006 1:22 PM To: Grant Griffith - IMail Subject: Re: [IMail Forum] Issues Using IMail 8.22 To Send Messages From Web Server GGI Well, here is the ASPMail log for an email that did not go out and GGI then below it is the Imail logs showing it timing out... As the session in the ASP-Mail log is completed without problems - and the session in the Imail log is not, there must be some proxy (or Virusscanner, ASSP etc.) between the both. The 250 and 221 messages are created by the recieving SMTP-Server. I assume it is a virusscanner, which stops sending on the message during the scan... Just an Idea. Maybe I am wrong... Matti GGI ASPMAIL LOG GGI 220 ei8htlegs.net (IMail 8.22 95649-4) NT-ESMTP Server X1 GGI HELO mail.ei8htlegs.net GGI 250 hello ei8htlegs.net GGI MAIL FROM:[EMAIL PROTECTED] GGI 250 ok GGI RCPT TO:[EMAIL PROTECTED] GGI 250 ok its for [EMAIL PROTECTED] GGI RCPT TO:[EMAIL PROTECTED] GGI 250 ok its for [EMAIL PROTECTED] GGI DATA GGI 354 Please start mail input. GGI Message body suppressed. GGI . GGI 250 Mail queued for delivery. GGI QUIT GGI 221 Closing connection. Good bye. GGI /ASPMAIL LOG GGI Imail Log GGI 03:16 20:36 SMTPD(12ab015a43ee) [64.184.24.60] connect GGI 64.184.24.36 port GGI 2919 GGI 03:16 20:36 SMTPD(12ab015a43ee) [64.184.24.36] HELO GGI mail.ei8htlegs.net GGI 03:16 20:36 SMTPD(12ab015a43ee) [64.184.24.36] MAIL GGI FROM:[EMAIL PROTECTED] GGI 03:16 20:36 SMTPD(12ab015a43ee) [64.184.24.36] RCPT GGI TO:[EMAIL PROTECTED] GGI 03:16 20:36 SMTPD(12ab015a43ee) [64.184.24.36] RCPT GGI TO:[EMAIL PROTECTED] GGI 03:16 20:41 SMTPD(12ab015a43ee) connection timed out GGI /Imail Log GGI Thanks, GGI Grant Griffith GGI Web Application Developer GGI Enhanced Telecommunications Corp. GGI (812)932-1000 GGI -Original Message- GGI From: [EMAIL PROTECTED] GGI [mailto:[EMAIL PROTECTED] On Behalf Of Grant GGI Griffith - IMail GGI Sent: Tuesday, March 14, 2006 10:49 AM GGI To: Imail_Forum@list.ipswitch.com GGI Subject: RE: [IMail Forum] Issues Using IMail GGI 8.22 To Send Messages From Web GGI Server GGI OK, I have logging turned on now for the ASPMail side of things. GGI Just have GGI to watch for it to occur again and then look at what both sides said. GGI Thanks, GGI Grant Griffith GGI Web Application Developer GGI Enhanced Telecommunications Corp. GGI (812)932-1000 GGI -Original Message- GGI From: [EMAIL PROTECTED] GGI [mailto:[EMAIL PROTECTED] On Behalf Of Eric GGI Shanbrom GGI Sent: Tuesday, March 14, 2006 10:41 AM GGI To: Imail_Forum@list.ipswitch.com GGI Subject: Re: [IMail Forum] Issues Using IMail GGI 8.22 To Send Messages From Web GGI Server GGI You are looking in the wrong direction. This is a message coming GGI into IMail GGI not going out to somewhere else. Since it hasn't been accepted for GGI delivery GGI by IMail there is nothing to re-queue and try again.. the question GGI here is GGI why didn't the conversation continue after the final RCPT
RE: [Declude.Virus] [IMail Forum] Issues Using IMail 8.22 To Send Messages From Web Server
Well, I do have Declude running with F-Prot. I just checked those logs and there is nothing in there for that message which is really odd... Maybe this is a Declude Issue now?!?! Thanks, Grant Griffith Web Application Developer Enhanced Telecommunications Corp. (812)932-1000 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Matti Haack Sent: Friday, March 17, 2006 1:22 PM To: Grant Griffith - IMail Subject: Re: [IMail Forum] Issues Using IMail 8.22 To Send Messages From Web Server GGI Well, here is the ASPMail log for an email that did not go out and then GGI below it is the Imail logs showing it timing GGI out... As the session in the ASP-Mail log is completed without problems - and the session in the Imail log is not, there must be some proxy (or Virusscanner, ASSP etc.) between the both. The 250 and 221 messages are created by the recieving SMTP-Server. I assume it is a virusscanner, which stops sending on the message during the scan... Just an Idea. Maybe I am wrong... Matti GGI ASPMAIL LOG GGI 220 ei8htlegs.net (IMail 8.22 95649-4) NT-ESMTP Server X1 GGI HELO mail.ei8htlegs.net GGI 250 hello ei8htlegs.net GGI MAIL FROM:[EMAIL PROTECTED] GGI 250 ok GGI RCPT TO:[EMAIL PROTECTED] GGI 250 ok its for [EMAIL PROTECTED] GGI RCPT TO:[EMAIL PROTECTED] GGI 250 ok its for [EMAIL PROTECTED] GGI DATA GGI 354 Please start mail input. GGI Message body suppressed. GGI . GGI 250 Mail queued for delivery. GGI QUIT GGI 221 Closing connection. Good bye. GGI /ASPMAIL LOG GGI Imail Log GGI 03:16 20:36 SMTPD(12ab015a43ee) GGI [64.184.24.60] connect 64.184.24.36 port GGI 2919 GGI 03:16 20:36 SMTPD(12ab015a43ee) GGI [64.184.24.36] HELO mail.ei8htlegs.net GGI 03:16 20:36 SMTPD(12ab015a43ee) [64.184.24.36] MAIL GGI FROM:[EMAIL PROTECTED] GGI 03:16 20:36 SMTPD(12ab015a43ee) GGI [64.184.24.36] RCPT TO:[EMAIL PROTECTED] GGI 03:16 20:36 SMTPD(12ab015a43ee) [64.184.24.36] RCPT GGI TO:[EMAIL PROTECTED] GGI 03:16 20:41 SMTPD(12ab015a43ee) connection timed out GGI /Imail Log GGI Thanks, GGI Grant Griffith GGI Web Application Developer GGI Enhanced Telecommunications Corp. GGI (812)932-1000 GGI -Original Message- GGI From: [EMAIL PROTECTED] GGI [mailto:[EMAIL PROTECTED] On GGI Behalf Of Grant Griffith - GGI IMail GGI Sent: Tuesday, March 14, 2006 10:49 AM GGI To: Imail_Forum@list.ipswitch.com GGI Subject: RE: [IMail Forum] Issues Using IMail GGI 8.22 To Send Messages From Web GGI Server GGI OK, I have logging turned on now for the ASPMail GGI side of things. Just have GGI to watch for it to occur again and then look at what both sides said. GGI Thanks, GGI Grant Griffith GGI Web Application Developer GGI Enhanced Telecommunications Corp. GGI (812)932-1000 GGI -Original Message- GGI From: [EMAIL PROTECTED] GGI [mailto:[EMAIL PROTECTED] On Behalf Of Eric Shanbrom GGI Sent: Tuesday, March 14, 2006 10:41 AM GGI To: Imail_Forum@list.ipswitch.com GGI Subject: Re: [IMail Forum] Issues Using IMail GGI 8.22 To Send Messages From Web GGI Server GGI You are looking in the wrong direction. This is a GGI message coming into IMail GGI not going out to somewhere else. Since it hasn't GGI been accepted for delivery GGI by IMail there is nothing to re-queue and try GGI again.. the question here is GGI why didn't the conversation continue after the GGI final RCPT TO. Unfortunately, GGI we only see one side of the communication, that GGI being the commands coming GGI in. At this time I do not know if the sending GGI server got the final 250 OK GGI and didn't send the DATA command or what. The GGI connection timed out while GGI IMail was waiting for a new command. A sniffer on the line can give more GGI info and point you to the problem. GGI Eric S GGI - Original Message - GGI From: Adam Campbell [EMAIL PROTECTED] GGI To: Imail_Forum@list.ipswitch.com GGI Sent: Tuesday, March 14, 2006 10:26 AM GGI Subject: Re: [IMail Forum] Issues Using IMail GGI 8.22 To Send Messages From Web GGI Server There's no DATA command. Maybe ASPMail didn't like SMTPD's response to the second RCPT TO and didn't give a DATA. Does ASPMail have a log? Would verbose logging of SMTPD help? adamc Grant Griffith - IMail wrote: Well, we use ASP and ASP.NET and below are the logs I just tracked of one email this morning. 03:14 08:19 SMTPD(c2c801ac0323) [64.184.24.60] connect 64.184.24.36 port 1539 03:14 08:19 SMTPD(c2c801ac0323) [64.184.24.36] HELO mail.ei8htlegs.net 03:14 08:19 SMTPD(c2c801ac0323) [64.184.24.36] MAIL FROM:[EMAIL PROTECTED] 03:14 08:19 SMTPD(c2c801ac0323) [64.184.24.36] RCPT TO:[EMAIL PROTECTED] 03:14 08:19 SMTPD(c2c801ac0323) [64.184.24.36] RCPT TO:[EMAIL PROTECTED] 03:14 08:24 SMTPD(c2c801ac0323) connection timed out It appears the message just
RE: [Declude.Virus] [IMail Forum] Realistic virus threat?
Hi Bill
Regarding the viruscodes 9 and 10 that was introduced
with f-prot 3.16I will quote the relaese notes
Archive handling has been improved and is now more consistent.Version
3.16 also includes detection against so-called "archive
bombs", archives... ... If the limit is exceeded then
it will exitwith a new exit code 10 (some files were not
scanned; in this casebecause maximum archive level was reached). The
OnDemand Scannerscans an infinite number of levels by default but this
behaviourcan be changed using the same command-line switch. The
RealTimeProtector scans to a depth of one level by default.Another
new exit code has been added to the OnDemand Scanner andthe Command-Line
Scanner, exit code 9. This exit code indicatesthat
some files were not scanned, e.g., encrypted files,
becauseof unsupported/unknown compression methods, because
ofunsupported/unknown file formats, corrupted or invalid files.Both
exit code 9 and 10 indicate that some files were not scannedand, therefore,
they can not be guaranteed to be clean. Thedifference between them is
that if exit code 10 occurs then somesettings can be changed (e.g., increase
the maximum allowedarchive depth) and the scanner might be able to scan the
file.If, however, exit code 9 occurs then the scanner is not able toscan
the file.A complete list of the exit codes can be found athttp://www.f-prot.com/support/windows/fpwin_faq/65.html
So exit code 10 seems ok for me but I'm not sure what
exit code 9 means in real world.
What "compressions methods" and "file formats" are
supported and what not?
If a legit message containsone little unsupported
or corrupt file with disabled notifications this will cause a false positive.
Right?
Someone has something against a feature request like
ONLYIFEXITCODEIS ?
So we could set up end user notifications for certain
"suspicious" exit codes.
Durring outbreaks while signatures are missing this
will block messages and show the end users that the virus filter is here and
working. After the signature update the exit code usualy should become 3 or
6.
Markus
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Bill
LandrySent: Thursday, February 02, 2006 11:31 PMTo:
Declude.Virus@declude.comSubject: Re: [Declude.Virus] [IMail Forum]
Realistic virus threat?
Andrew, I already have PRESCAN set to off and use
the /server switch with F-Prot, so those were not the issue that was causing
this behavior for me. From my virus.cfg:
#
F-ProtSCANFILE1C:\Progra~1\FSI\F-Prot\fpcmd.exe -AI -ARCHIVE=5 -DUMB
-NOBOOT -NOBREAK -NOMEM -PACKED -SAFEREMOVE -SERVER -SILENT
-REPORT=report.txtVIRUSCODE13VIRUSCODE16VIRUSCODE18VIRUSCODE19VIRUSCODE110REPORT1Infection:
PRESCANOFF
Bill
- Original Message -
From:
Colbeck,
Andrew
To: Declude.Virus@declude.com
Cc: [EMAIL PROTECTED]
Sent: Thursday, February 02, 2006 2:09
PM
Subject: RE: [Declude.Virus] [IMail
Forum] Realistic virus threat?
My raw speculation:
1) It is missed because the virus.cfg is using the
"PRESCANON" switch (the default, I believe) and the declude.exe
application does not decode the MIME or other coding as flexibly as a mail
client would, or makes an uninformed decision about what is an object worth
scanning.
ANSWER: use PRESCAN OFF instead. This will
incur more CPU time as the selected antivirus scanner(s) will be scanning
all objects.
2) For F-Prot specifically, the /server switch is
not being used and therefore F-Prot is not doing the message format
decoding. If Declude did a perfect job, this setting would be
irrelevant.
ANSWER: use the /server switch in your SCANFILE
definition. This would cause more CPU time on the few messages that
appear as nested message encoding; it is intended for scanning servers with
multiple mailbox formats and nested messages.
I follow my own advice on these two points and do
not have a problem with F-Prot under Declude EVA missing known
viruses.
Andrew 8)
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Bill
LandrySent: Thursday, February 02, 2006 1:47 PMTo:
Imail_Forum@list.ipswitch.com;
Declude.Virus@declude.comSubject: Re: [Declude.Virus] [IMail
Forum] Realistic virus threat?
I reported this issue quite some time ago,
when Scott was still running the show, and never got a satisfactory
answer. You can scan the raw d*.smd file with f-prot and it will
detect the virus, but run it through Declude Virus, and the virus goes
though undetected. After pestering and prodding for several days, I
finally gave up on getting a response that made sense. But it must
have something to do wi
Re: [Declude.Virus] [IMail Forum] Realistic virus threat?
I reported this issue quite some time ago, when Scott was still running the show, and never got a satisfactory answer. You can scan the raw d*.smd file with f-prot and it will detect the virus, but run it through Declude Virus, and the virus goes though undetected. After pestering and prodding for several days, I finally gave up on getting a response that made sense. But it must have something to do with the way Declude Virus is stripping off the mime encapsulation before calling f-prot to scan the message. I have copied this to the Declude Virus list, as well, since it really belongs there rather than on the IMail list. Bill - Original Message - From: Michael Graveen To: Imail_Forum@list.ipswitch.com Sent: Thursday, February 02, 2006 1:15 PM Subject: RE: [IMail Forum] Realistic virus threat? I've had F-Prot miss this virus on the mail server (being called from Declude). But it's caught coming to my desktop, with the same virus scanner. Is anyone else seeing this?MikeAt 02:25 PM 2/2/2006, you wrote: I believe F-Prot calls it W32/[EMAIL PROTECTED] From: Stephen Guluk [mailto:[EMAIL PROTECTED]] Sent: Thursday, February 02, 2006 2:19 PM To: Imail_Forum@list.ipswitch.com Subject: [IMail Forum] Realistic virus threat? Off topic but still related to email... Had a couple clients that called concerned about this virus that is said to open and do it's damage tomorrow: [EMAIL PROTECTED] Win32.Nyxem.e I run F-prot on my mail server and their list of virus definitions shows nothing pertaining to this virus name. I wrote them but expect that they are sleeping since they are in Iceland. Anyone else running F-prot and know any more info on it this is a real threat? Regards, Steve Guluk SGDesign (949) 661-9333 ICQ: 7230769
RE: [Declude.Virus] [IMail Forum] Realistic virus threat?
My raw speculation: 1) It is missed because the virus.cfg is using the "PRESCANON" switch (the default, I believe) and the declude.exe application does not decode the MIME or other coding as flexibly as a mail client would, or makes an uninformed decision about what is an object worth scanning. ANSWER: use PRESCAN OFF instead. This will incur more CPU time as the selected antivirus scanner(s) will be scanning all objects. 2) For F-Prot specifically, the /server switch is not being used and therefore F-Prot is not doing the message format decoding. If Declude did a perfect job, this setting would be irrelevant. ANSWER: use the /server switch in your SCANFILE definition. This would cause more CPU time on the few messages that appear as nested message encoding; it is intended for scanning servers with multiple mailbox formats and nested messages. I follow my own advice on these two points and do not have a problem with F-Prot under Declude EVA missing known viruses. Andrew 8) From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Bill LandrySent: Thursday, February 02, 2006 1:47 PMTo: Imail_Forum@list.ipswitch.com; Declude.Virus@declude.comSubject: Re: [Declude.Virus] [IMail Forum] Realistic virus threat? I reported this issue quite some time ago, when Scott was still running the show, and never got a satisfactory answer. You can scan the raw d*.smd file with f-prot and it will detect the virus, but run it through Declude Virus, and the virus goes though undetected. After pestering and prodding for several days, I finally gave up on getting a response that made sense. But it must have something to do with the way Declude Virus is stripping off the mime encapsulation before calling f-prot to scan the message. I have copied this to the Declude Virus list, as well, since it really belongs there rather than on the IMail list. Bill - Original Message - From: Michael Graveen To: Imail_Forum@list.ipswitch.com Sent: Thursday, February 02, 2006 1:15 PM Subject: RE: [IMail Forum] Realistic virus threat? I've had F-Prot miss this virus on the mail server (being called from Declude). But it's caught coming to my desktop, with the same virus scanner. Is anyone else seeing this?MikeAt 02:25 PM 2/2/2006, you wrote: I believe F-Prot calls it W32/[EMAIL PROTECTED] From: Stephen Guluk [mailto:[EMAIL PROTECTED]] Sent: Thursday, February 02, 2006 2:19 PM To: Imail_Forum@list.ipswitch.com Subject: [IMail Forum] Realistic virus threat? Off topic but still related to email... Had a couple clients that called concerned about this virus that is said to open and do it's damage tomorrow: [EMAIL PROTECTED] Win32.Nyxem.e I run F-prot on my mail server and their list of virus definitions shows nothing pertaining to this virus name. I wrote them but expect that they are sleeping since they are in Iceland. Anyone else running F-prot and know any more info on it this is a real threat? Regards, Steve Guluk SGDesign (949) 661-9333 ICQ: 7230769
Re: [Declude.Virus] [IMail Forum] Realistic virus threat?
Andrew, I already have PRESCAN set to off and use the /server switch with F-Prot, so those were not the issue that was causing this behavior for me. From my virus.cfg: # F-ProtSCANFILE1C:\Progra~1\FSI\F-Prot\fpcmd.exe -AI -ARCHIVE=5 -DUMB -NOBOOT -NOBREAK -NOMEM -PACKED -SAFEREMOVE -SERVER -SILENT -REPORT=report.txtVIRUSCODE13VIRUSCODE16VIRUSCODE18VIRUSCODE19VIRUSCODE110REPORT1Infection: PRESCANOFF Bill - Original Message - From: Colbeck, Andrew To: Declude.Virus@declude.com Cc: [EMAIL PROTECTED] Sent: Thursday, February 02, 2006 2:09 PM Subject: RE: [Declude.Virus] [IMail Forum] Realistic virus threat? My raw speculation: 1) It is missed because the virus.cfg is using the "PRESCANON" switch (the default, I believe) and the declude.exe application does not decode the MIME or other coding as flexibly as a mail client would, or makes an uninformed decision about what is an object worth scanning. ANSWER: use PRESCAN OFF instead. This will incur more CPU time as the selected antivirus scanner(s) will be scanning all objects. 2) For F-Prot specifically, the /server switch is not being used and therefore F-Prot is not doing the message format decoding. If Declude did a perfect job, this setting would be irrelevant. ANSWER: use the /server switch in your SCANFILE definition. This would cause more CPU time on the few messages that appear as nested message encoding; it is intended for scanning servers with multiple mailbox formats and nested messages. I follow my own advice on these two points and do not have a problem with F-Prot under Declude EVA missing known viruses. Andrew 8) From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Bill LandrySent: Thursday, February 02, 2006 1:47 PMTo: Imail_Forum@list.ipswitch.com; Declude.Virus@declude.comSubject: Re: [Declude.Virus] [IMail Forum] Realistic virus threat? I reported this issue quite some time ago, when Scott was still running the show, and never got a satisfactory answer. You can scan the raw d*.smd file with f-prot and it will detect the virus, but run it through Declude Virus, and the virus goes though undetected. After pestering and prodding for several days, I finally gave up on getting a response that made sense. But it must have something to do with the way Declude Virus is stripping off the mime encapsulation before calling f-prot to scan the message. I have copied this to the Declude Virus list, as well, since it really belongs there rather than on the IMail list. Bill - Original Message - From: Michael Graveen To: Imail_Forum@list.ipswitch.com Sent: Thursday, February 02, 2006 1:15 PM Subject: RE: [IMail Forum] Realistic virus threat? I've had F-Prot miss this virus on the mail server (being called from Declude). But it's caught coming to my desktop, with the same virus scanner. Is anyone else seeing this?MikeAt 02:25 PM 2/2/2006, you wrote: I believe F-Prot calls it W32/[EMAIL PROTECTED] From: Stephen Guluk [mailto:[EMAIL PROTECTED]] Sent: Thursday, February 02, 2006 2:19 PM To: Imail_Forum@list.ipswitch.com Subject: [IMail Forum] Realistic virus threat? Off topic but still related to email... Had a couple clients that called concerned about this virus that is said to open and do it's damage tomorrow: [EMAIL PROTECTED] Win32.Nyxem.e I run F-prot on my mail server and their list of virus definitions shows nothing pertaining to this virus name. I wrote them but expect that they are sleeping since they are in Iceland. Anyone else running F-prot and know any more info on it this is a real threat? Regards, Steve Guluk SGDesign (949) 661-9333 ICQ: 7230769
RE: [Declude.Virus] [IMail Forum] Realistic virus threat?
3) On a very busy server, Declude may be aborting the scan because it is taking too long. The default is 60 seconds. ANSWER: Use SCANNERTIMEOUT90 in the virus.cfg or some other time value of your choosing. Andrew 8) From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Colbeck, AndrewSent: Thursday, February 02, 2006 2:10 PMTo: Declude.Virus@declude.comCc: [EMAIL PROTECTED]Subject: RE: [Declude.Virus] [IMail Forum] Realistic virus threat? My raw speculation: 1) It is missed because the virus.cfg is using the "PRESCANON" switch (the default, I believe) and the declude.exe application does not decode the MIME or other coding as flexibly as a mail client would, or makes an uninformed decision about what is an object worth scanning. ANSWER: use PRESCAN OFF instead. This will incur more CPU time as the selected antivirus scanner(s) will be scanning all objects. 2) For F-Prot specifically, the /server switch is not being used and therefore F-Prot is not doing the message format decoding. If Declude did a perfect job, this setting would be irrelevant. ANSWER: use the /server switch in your SCANFILE definition. This would cause more CPU time on the few messages that appear as nested message encoding; it is intended for scanning servers with multiple mailbox formats and nested messages. I follow my own advice on these two points and do not have a problem with F-Prot under Declude EVA missing known viruses. Andrew 8) From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Bill LandrySent: Thursday, February 02, 2006 1:47 PMTo: Imail_Forum@list.ipswitch.com; Declude.Virus@declude.comSubject: Re: [Declude.Virus] [IMail Forum] Realistic virus threat? I reported this issue quite some time ago, when Scott was still running the show, and never got a satisfactory answer. You can scan the raw d*.smd file with f-prot and it will detect the virus, but run it through Declude Virus, and the virus goes though undetected. After pestering and prodding for several days, I finally gave up on getting a response that made sense. But it must have something to do with the way Declude Virus is stripping off the mime encapsulation before calling f-prot to scan the message. I have copied this to the Declude Virus list, as well, since it really belongs there rather than on the IMail list. Bill - Original Message - From: Michael Graveen To: Imail_Forum@list.ipswitch.com Sent: Thursday, February 02, 2006 1:15 PM Subject: RE: [IMail Forum] Realistic virus threat? I've had F-Prot miss this virus on the mail server (being called from Declude). But it's caught coming to my desktop, with the same virus scanner. Is anyone else seeing this?MikeAt 02:25 PM 2/2/2006, you wrote: I believe F-Prot calls it W32/[EMAIL PROTECTED] From: Stephen Guluk [mailto:[EMAIL PROTECTED]] Sent: Thursday, February 02, 2006 2:19 PM To: Imail_Forum@list.ipswitch.com Subject: [IMail Forum] Realistic virus threat? Off topic but still related to email... Had a couple clients that called concerned about this virus that is said to open and do it's damage tomorrow: [EMAIL PROTECTED] Win32.Nyxem.e I run F-prot on my mail server and their list of virus definitions shows nothing pertaining to this virus name. I wrote them but expect that they are sleeping since they are in Iceland. Anyone else running F-prot and know any more info on it this is a real threat? Regards, Steve Guluk SGDesign (949) 661-9333 ICQ: 7230769
Re: [Declude.Virus] [IMail Forum] Realistic virus threat?
Scan timeouts were not the issue either, since my secondary Declude Virus scanner (TrendMicro) would catch the virus fine, and the logs would show the scanning to be taking a mere second or two. Bill - Original Message - From: Colbeck, Andrew To: Declude.Virus@declude.com Sent: Thursday, February 02, 2006 2:34 PM Subject: RE: [Declude.Virus] [IMail Forum] Realistic virus threat? 3) On a very busy server, Declude may be aborting the scan because it is taking too long. The default is 60 seconds. ANSWER: Use SCANNERTIMEOUT90 in the virus.cfg or some other time value of your choosing. Andrew 8) From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Colbeck, AndrewSent: Thursday, February 02, 2006 2:10 PMTo: Declude.Virus@declude.comCc: [EMAIL PROTECTED]Subject: RE: [Declude.Virus] [IMail Forum] Realistic virus threat? My raw speculation: 1) It is missed because the virus.cfg is using the "PRESCANON" switch (the default, I believe) and the declude.exe application does not decode the MIME or other coding as flexibly as a mail client would, or makes an uninformed decision about what is an object worth scanning. ANSWER: use PRESCAN OFF instead. This will incur more CPU time as the selected antivirus scanner(s) will be scanning all objects. 2) For F-Prot specifically, the /server switch is not being used and therefore F-Prot is not doing the message format decoding. If Declude did a perfect job, this setting would be irrelevant. ANSWER: use the /server switch in your SCANFILE definition. This would cause more CPU time on the few messages that appear as nested message encoding; it is intended for scanning servers with multiple mailbox formats and nested messages. I follow my own advice on these two points and do not have a problem with F-Prot under Declude EVA missing known viruses. Andrew 8) From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Bill LandrySent: Thursday, February 02, 2006 1:47 PMTo: Imail_Forum@list.ipswitch.com; Declude.Virus@declude.comSubject: Re: [Declude.Virus] [IMail Forum] Realistic virus threat? I reported this issue quite some time ago, when Scott was still running the show, and never got a satisfactory answer. You can scan the raw d*.smd file with f-prot and it will detect the virus, but run it through Declude Virus, and the virus goes though undetected. After pestering and prodding for several days, I finally gave up on getting a response that made sense. But it must have something to do with the way Declude Virus is stripping off the mime encapsulation before calling f-prot to scan the message. I have copied this to the Declude Virus list, as well, since it really belongs there rather than on the IMail list. Bill - Original Message - From: Michael Graveen To: Imail_Forum@list.ipswitch.com Sent: Thursday, February 02, 2006 1:15 PM Subject: RE: [IMail Forum] Realistic virus threat? I've had F-Prot miss this virus on the mail server (being called from Declude). But it's caught coming to my desktop, with the same virus scanner. Is anyone else seeing this?MikeAt 02:25 PM 2/2/2006, you wrote: I believe F-Prot calls it W32/[EMAIL PROTECTED] From: Stephen Guluk [mailto:[EMAIL PROTECTED]] Sent: Thursday, February 02, 2006 2:19 PM To: Imail_Forum@list.ipswitch.com Subject: [IMail Forum] Realistic virus threat? Off topic but still related to email... Had a couple clients that called concerned about this virus that is said to open and do it's damage tomorrow: [EMAIL PROTECTED] Win32.Nyxem.e I run F-prot on my mail server and their list of virus definitions shows nothing pertaining to this virus name. I wrote them but expect that they are sleeping since they are in Iceland. Anyone else running F-prot and know any more info on it this is a real threat? Regards, Steve Guluk SGDesign (949) 661-9333 ICQ: 7230769
Re: [Declude.Virus] [IMail Forum] Declude vs Ipswitch AV
Hi Todd, It will take some time to train your Declude installation, but it's well worth it. Out of the box you can probably quickly get to 80% filtering. Tuned over a couple of months you can probably get 99% filtering. I highly recommend you add Message Sniffer (sortmonster.com) to the mix. It inexpensive ($30/month) and provides excellent content filtering. There are very few features that would make me go to Virus Pro...it's mainly for the ability to plug in multiple virus scanners. Junkmail Pro is a good plan, as it has a lot of support for custom content filtering, as well as per-user configurations. There are other important features, but those are some of the most used. With Declude you can also plug in a number of external filters to add to the detection. And there is quite a community around it constantly giving advice, sharing tools, etc. Support is great, too. For windows-based mail servers, I don't think there's a better suite for spam and virus. They'll be launching an MTA-independent version soon so it can be used as a gateway for any mail server. You might download the trial and lurk on the Declude lists to see what it's like. [EMAIL PROTECTED] and [EMAIL PROTECTED] are the support lists. Darin. - Original Message - From: Todd Richards [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Friday, December 10, 2004 12:06 PM Subject: RE: [IMail Forum] Declude vs Ipswitch AV Hi Darin - I'm emailing you off-list, as I think people tend to get cranky when a subject gets brought up often (as we all do!) Is it safe to assume you are a Declude user? What I'm thinking of for our Imail 8.14 server is to use Declude Virus Pro, Declude Junk Mail Pro, and running Fprot as the virus scanner. If you don't mind me asking - what do you think about that? Am I missing anything? Thanks for your time. Todd -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darin Cox Sent: Tuesday, November 30, 2004 4:50 PM To: [EMAIL PROTECTED] Subject: Re: [IMail Forum] Declude vs Ipswitch AV Highly recommend using Declude Virus and F-Prot (or Declude Virus Pro and plugging in a couple of scanners) instead of IMail's stripped down version of Symantec AV. Darin. - Original Message - From: Todd Richards [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Tuesday, November 30, 2004 12:12 PM Subject: [IMail Forum] Declude vs Ipswitch AV Hey everyone - I tried to search the archives but wasn't getting what I wanted, so I'm posting this back here. I apologize for a repeat on the topics. We currently have Imail 8.13 with Ipswitch Imail AV, which I'm very very disappointed with. Am I correct that I can scrap that and go with Declude, which seemed to receive an overwhelming amount of support from you, not to mention a cost savings to us? I appreciate the feedback. Todd To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] imail
A robot just answered you.. funny. Not even try to change the headers or understand your question.. Luis -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.Virus- [EMAIL PROTECTED] On Behalf Of steve :-) Sent: Thursday, October 28, 2004 9:46 AM To: [EMAIL PROTECTED] Subject: [Declude.Virus] imail Below is the responce i got from ipswitch sales. Steve Good Morning Steve - Here are the plans set forth by Ipswitch regarding the New Collaboration Suite. If you should have any questions, please let me know. Best Regards, Renee Breckenridge Service Sales Representative Email - [EMAIL PROTECTED] www.ipswitch.com We have released our New Ipswitch Collaboration Suite. http://www.ipswitch.com/Products/collaboration/index.html Ipswitch Collaboration Suite Provides: E-mail collaboration Standards-based email Discussion lists and e-mail groups Real-time collaboration Secure instant messaging Workgroup collaboration with MS Outlook Shared calendaring Global address books Protection of the collaboration system Anti-spam protection Anti-virus subscriptions Backed by Ipswitch service and support One year of support updates included IMail's functionality has been incorporated into the Ipswitch Collaboration Suite and is no longer offered on an individual basis for new purchases or for renewals. Imail is now only offered as a part of the Ipswitch Collaboration Suite. Ipswitch is offering customers of Imail, a limited-time opportunity to purchase Ipswitch Collaboration Suite at a deeply discounted price. To cross grade to the New ICS, please choose the Premium or Standard edition and what User Level you require. The User Levels are 25, 100, 250 and Unlimited. ICS Standard Edition consists of: IMail Server, Instant Messaging, AV Standard, Shared calendaring and Global address books and a one-year Service Agreement. ICS Premium Edition consists of: IMail Server, Instant Messaging, AV Premium, Shared calendaring and Global address books and a one-year Service Agreement. ICS ISP/EDU Edition consists of: IMail Server, AV Premium, Killer WebMail and a one-year Service Agreement The Premium Edition with Symantec Anti-Virus Protection: Symantec's Scan Server technology utilizes their Live Update Technology which does not require an interruption of the services. It also is designed to quickly scan for viruses and is ideal for high traffic environments. The Standard Edition with Bit Defender Anti-Virus Protection: Bit Defender is more for low traffic environments and requires that you interrupt the services when applying a Server update. To apply Live Virus definition updates you would need to implement Bit Defender's command line utility named AVUpdate.exe Ipswitch Collaboration Suite, Premium Edition with Symantec Anti-Virus Protection ***Special Pricing for Current Imail Customers 25 Users $ 695 100 Users $ 1,495 250 Users $ 2,995 Unlimited $ 5,995 Ipswitch Collaboration Suite, Standard Edition with Bit Defender Anti- Virus Protection ***Special Pricing for Current Imail Customers 25 Users $ 595 100 Users $ 1,295 250 Users $ 2,495 Unlimited $ 4,995 Ipswitch Collaboration Suite, ISP Edition with Symantec Anti-Virus Protection (Does not include shared calendars or instant messaging) ***Special Pricing for Current Imail Customers Unlimited $ 3,995 Purchasing Ipswitch Collaboration Suite at these special prices will allow you to continue service on your IMail Server, and will deliver additional capabilities such as shared calendars, secure instant messaging, anti- spam, and anti-virus protection. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Sent: Wednesday, October 27, 2004 11:53 PM To: [EMAIL PROTECTED] Subject: #Ipswitch_Collaboration_Suite# Ipswitch Sales Inquiry fromSteve Sender : [EMAIL PROTECTED] Tracking Number : Pool: Contracts Sent to : [EMAIL PROTECTED] Date: 10/27/04 11:54 PM --- Forwarded by: Traci Casparius (no comments entered) --- #Ipswitch_Collaboration_Suite# Ipswitch Sales Inquiry from Steve Keeling First Name: Steve Last Name:Keeling Company Name: Keeling Inc. Phone Number: Product: Ipswitch_Collaboration_Suite Cust Type:existing *** Email Message Follows *** I realy hope that your new combo colaboration is not the way of the future for Imail server. We have been a customer since 1998. We are a small ISP and the added cost would be a show stopper for us! And the features you are adding are things we have very little need of. I also do not see any support contracts for customers that don't want to move up to this new bundle?? I would be very intersted in hearing your plans, as we
Re: [Declude.Virus] IMail?
where can I buy IMail? (not at Ipswitch.com, cheaper :) Google and Froogle are your friends. --Sandy Sanford Whiteman, Chief Technologist Broadleaf Systems, a division of Cypress Integrated Systems, Inc. e-mail: [EMAIL PROTECTED] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] IMail?
CDW John Tolmachoff Engineer/Consultant/Owner eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Hirthe, Alexander Sent: Tuesday, September 21, 2004 12:27 AM To: [EMAIL PROTECTED] Subject: [Declude.Virus] IMail? Hello, where can I buy IMail? (not at Ipswitch.com, cheaper :) Alex
RE: [Declude.Virus] IMail?
Don't you ever sleep? Good night. John Tolmachoff Engineer/Consultant/Owner eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Sanford Whiteman Sent: Tuesday, September 21, 2004 12:34 AM To: Hirthe, Alexander Subject: Re: [Declude.Virus] IMail? where can I buy IMail? (not at Ipswitch.com, cheaper :) Google and Froogle are your friends. --Sandy Sanford Whiteman, Chief Technologist Broadleaf Systems, a division of Cypress Integrated Systems, Inc. e-mail: [EMAIL PROTECTED] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
Re: [Declude.Virus] Imail Version 8.1
We have been using 8.1 for a few weeks now. We have had numerous problems with mailboxes being locked or unavailable. You may want to wait for 8.11 due out in about 3 weeks. Gene Have you installed this 2 hotfixes of 8.1? In my experience, no mailbox locked, maybe due to I installed these 2 immediately after installation, but there is some minor problem, like when users click Go Back in webmail, often got page can not display. a.. IMail Server 8.1 Hotfix 2 April 8, 2004 This hotfix fixes a possible handle leak in mailbox.dll which could result in locked mailboxes. a.. IMail Server 8.1 Hotfix 1 April 5, 2004 [included in 8.1 Hotfix 2] This hotfix fixes Queue Manager ERR 005 when delivering to multiple nested subfolders. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry Sent: Thursday, April 22, 2004 3:08 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.Virus] Imail Version 8.1 Are there any issues with using version 8.1 with Declude? I am thinking of upgrading our servers to 8.1. We are running declude 1.79. Any thoughts? There are no known issues running IMail v8.1 with 1.79 (there is a minor issue with Declude v1.75 and earlier, where IMail v8.1 would cause some E-mails to be scanned multiple times -- for Declude Virus, it would just cause a minor performance hit). -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus] --- Incoming mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.656 / Virus Database: 421 - Release Date: 4/9/2004 --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.656 / Virus Database: 421 - Release Date: 4/9/2004 --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com. --- This email has been scanned by Antivirus software in Crejob.com hosting server --- This email has been scanned by Antivirus software in Crejob.com hosting server --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] Imail Version 8.1
I installed them repeatedly to try and solve the problem. I finally deleted all the .exe and .dll files in Imail and reloaded it from the download, re-applied the HF2 and now I'm not getting the mailbox unavailable (yet), but I am getting reboots due to a bug check. I never did get LDAP to work right. Gene Head ACCRAM Inc. MCP,Net+,A+,CCNA,CCDA [EMAIL PROTECTED] [EMAIL PROTECTED] -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] Sent: Friday, April 23, 2004 5:48 AM To: [EMAIL PROTECTED] Subject: Re: [Declude.Virus] Imail Version 8.1 We have been using 8.1 for a few weeks now. We have had numerous problems with mailboxes being locked or unavailable. You may want to wait for 8.11 due out in about 3 weeks. Gene Have you installed this 2 hotfixes of 8.1? In my experience, no mailbox locked, maybe due to I installed these 2 immediately after installation, but there is some minor problem, like when users click Go Back in webmail, often got page can not display. a.. IMail Server 8.1 Hotfix 2 - April 8, 2004 This hotfix fixes a possible handle leak in mailbox.dll which could result in locked mailboxes. a.. IMail Server 8.1 Hotfix 1 - April 5, 2004 [included in 8.1 Hotfix 2] This hotfix fixes Queue Manager ERR 005 when delivering to multiple nested subfolders. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry Sent: Thursday, April 22, 2004 3:08 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.Virus] Imail Version 8.1 Are there any issues with using version 8.1 with Declude? I am thinking of upgrading our servers to 8.1. We are running declude 1.79. Any thoughts? There are no known issues running IMail v8.1 with 1.79 (there is a minor issue with Declude v1.75 and earlier, where IMail v8.1 would cause some E-mails to be scanned multiple times -- for Declude Virus, it would just cause a minor performance hit). -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus] --- Incoming mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.656 / Virus Database: 421 - Release Date: 4/9/2004 --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.656 / Virus Database: 421 - Release Date: 4/9/2004 --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com. --- This email has been scanned by Antivirus software in Crejob.com hosting server --- This email has been scanned by Antivirus software in Crejob.com hosting server --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
Re: [Declude.Virus] Imail Version 8.1
Are there any issues with using version 8.1 with Declude? I am thinking of upgrading our servers to 8.1. We are running declude 1.79. Any thoughts? There are no known issues running IMail v8.1 with 1.79 (there is a minor issue with Declude v1.75 and earlier, where IMail v8.1 would cause some E-mails to be scanned multiple times -- for Declude Virus, it would just cause a minor performance hit). -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] Imail Version 8.1
We have been using 8.1 for a few weeks now. We have had numerous problems with mailboxes being locked or unavailable. You may want to wait for 8.11 due out in about 3 weeks. Gene -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry Sent: Thursday, April 22, 2004 3:08 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.Virus] Imail Version 8.1 Are there any issues with using version 8.1 with Declude? I am thinking of upgrading our servers to 8.1. We are running declude 1.79. Any thoughts? There are no known issues running IMail v8.1 with 1.79 (there is a minor issue with Declude v1.75 and earlier, where IMail v8.1 would cause some E-mails to be scanned multiple times -- for Declude Virus, it would just cause a minor performance hit). -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus] --- Incoming mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.656 / Virus Database: 421 - Release Date: 4/9/2004 --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.656 / Virus Database: 421 - Release Date: 4/9/2004 --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] Imail 8.1
This happens to me too. I am not using a copyall account. Regards, Steinar -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of William Baumbach Sent: 1. april 2004 03:17 To: [EMAIL PROTECTED] Subject: Re: [Declude.Virus] Imail 8.1 since I upgraded to 8.1 I now get double enteries added to the FOOTER botton of each incomming email outgoing emails seem to be OK GLOBAL.CFG WEIGHT-F weightrange xx -1000 1000 $default$.junkmail WEIGHT-F FOOTER %CR%[ scanned for spam to: %ALLRECIPS% %INOROUT% http://www.%LOCALHOST% on %DATE% at %TIME%-0500et. ]%CR% and this line also is added twice Virus.cfg FOOTER %CR%[ scanned for viruses to: %ALLRECIPS% %INOROUT% http://www.%LOCALHOST% on %DATE% at %TIME%-0500et. ]%CR% Sincerely, William J. Baumbach II [EMAIL PROTECTED] 9975 Pennsylvania Ave. Manassas, Va. 20110-2028 Ph: 703-367-7900 ext:1708 Fax: 703-691-0946 - - Original Message - From: R. Scott Perry [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Wednesday, March 31, 2004 2:55 PM Subject: Re: [Declude.Virus] Imail 8.1 Are there any issues between Declude antivirus or junkmail and Imail 8.1 we need to be aware of or address if/when we choice to upgrade? I assume not, but since Ipswitch did not invite us to the IMail v8.1 beta, I can't answer for certain. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com. [ scanned for spam to: [EMAIL PROTECTED] incoming http://www.DcMetroNet.com on 03/31/2004 at 14:58:10-0500et. ] [ scanned for viruses to: [EMAIL PROTECTED] incoming http://www.DcMetroNet.com on 03/31/2004 at 14:58:13-0500et. ] [ scanned for spam to: [EMAIL PROTECTED] outgoing http://www.DcMetroNet.com on 03/31/2004 at 20:17:45-0500et. ] This email message is for the sole use of the intended recipient(s) and may contain confidential and privileged information. Any unauthorized review, use, disclosure or distribution of this email is prohibited. If you are not the intended recipient, please contact the sender and destroy all paper and electronic copies of this message. [ scanned for viruses to: [EMAIL PROTECTED] outgoing http://www.DcMetroNet.com on 03/31/2004 at 20:17:48-0500et. ] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] Imail 8.1
This happens to me too. I am not using a copyall account. It seems that IMail v8.1 will send forwarded mail through Declude a second time. We haven't confirmed this yet, and unfortunately Ipswitch hasn't provided us with a copy of IMail v8.1 yet, so we are unable to test this yet, or determine what will be necessary for a workaround. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] Imail 8.1
I may have to concur on this. I have a user that receives messages forwarded from another account. This morning, I saw the headers of one and it appeared to have be passed through Declude twice, but I have had a hairy morning and have not been able to follow up. John Tolmachoff Engineer/Consultant/Owner eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry Sent: Thursday, April 01, 2004 1:34 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.Virus] Imail 8.1 This happens to me too. I am not using a copyall account. It seems that IMail v8.1 will send forwarded mail through Declude a second time. We haven't confirmed this yet, and unfortunately Ipswitch hasn't provided us with a copy of IMail v8.1 yet, so we are unable to test this yet, or determine what will be necessary for a workaround. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
Re: [Declude.Virus] Imail 8.1
Are there any issues between Declude antivirus or junkmail and Imail 8.1 we need to be aware of or address if/when we choice to upgrade? I assume not, but since Ipswitch did not invite us to the IMail v8.1 beta, I can't answer for certain. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
Re: [Declude.Virus] Imail 8.1
I assume not, but since Ipswitch did not invite us to the IMail v8.1 beta, I can't answer for certain. ooo those dirty rats! probly because their anti-spam setup is looks like Fisher-Price stuff compared to Declude :-) Rick --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
Re: [Declude.Virus] Imail 8.1
since I upgraded to 8.1 I now get double enteries added to the FOOTER botton of each incomming email outgoing emails seem to be OK GLOBAL.CFG WEIGHT-F weightrange xx -1000 1000 $default$.junkmail WEIGHT-F FOOTER %CR%[ scanned for spam to: %ALLRECIPS% %INOROUT% http://www.%LOCALHOST% on %DATE% at %TIME%-0500et. ]%CR% and this line also is added twice Virus.cfg FOOTER %CR%[ scanned for viruses to: %ALLRECIPS% %INOROUT% http://www.%LOCALHOST% on %DATE% at %TIME%-0500et. ]%CR% Sincerely, William J. Baumbach II [EMAIL PROTECTED] 9975 Pennsylvania Ave. Manassas, Va. 20110-2028 Ph: 703-367-7900 ext:1708 Fax: 703-691-0946 - - Original Message - From: R. Scott Perry [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Wednesday, March 31, 2004 2:55 PM Subject: Re: [Declude.Virus] Imail 8.1 Are there any issues between Declude antivirus or junkmail and Imail 8.1 we need to be aware of or address if/when we choice to upgrade? I assume not, but since Ipswitch did not invite us to the IMail v8.1 beta, I can't answer for certain. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com. [ scanned for spam to: [EMAIL PROTECTED] incoming http://www.DcMetroNet.com on 03/31/2004 at 14:58:10-0500et. ] [ scanned for viruses to: [EMAIL PROTECTED] incoming http://www.DcMetroNet.com on 03/31/2004 at 14:58:13-0500et. ] [ scanned for spam to: [EMAIL PROTECTED] outgoing http://www.DcMetroNet.com on 03/31/2004 at 20:17:45-0500et. ] This email message is for the sole use of the intended recipient(s) and may contain confidential and privileged information. Any unauthorized review, use, disclosure or distribution of this email is prohibited. If you are not the intended recipient, please contact the sender and destroy all paper and electronic copies of this message. [ scanned for viruses to: [EMAIL PROTECTED] outgoing http://www.DcMetroNet.com on 03/31/2004 at 20:17:48-0500et. ] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
Re: [Declude.Virus] Imail 8.1
since I upgraded to 8.1 I now get double enteries added to the FOOTER botton of each incomming email It looks like IMail may be running Declude once for each recipient (it looks like you are using a copyall account). Do you have the IMail and Declude log file entries for an E-mail with the double footers? -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] Imail Queue Manager/SMTP at 100% after declude f-prot updates
The server is a Compaq Proliant with Dual Piii 800's, RAID 5 (I know - RAID 1,0 is better - it's on the schedule to be re-config'd), 1GB RAM, defragged by diskkeeper every nite We run IMAIL program on C: and spool mailboxes on D: I identified the outside hit increase as coming from an outside address sending mail in; have blocked te address and all is running smooth again Sincerely, Randy Armbrecht Global Web SolutionsR, Inc. 804-346-5300 ext. 1 877-800-GLOBAL (4562) ext. 1 http://globalweb.net Richmond's Internet Source since 1996! WEB HOSTING including EMAIL beginning at $29/month! Non-Profits - receive a 25% discount! -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry Sent: Friday, March 19, 2004 10:18 AM To: [EMAIL PROTECTED] Subject: RE: [Declude.Virus] Imail Queue Manager/SMTP at 100% after declude f-prot updates We have been running Declude JM Pro and Declude Virus Standard for almost 2 years now; it wasn't until shortly afer the updates to both Declude and F-Prot yesterday that this occurred...The CPU with all services running is sustained normally between the 20%-50% range with peaks to 75% We generally average about: LocalDeliver29000 RemoteDeliver9500 If you have a single 500MHz CPU, you'll likely see the CPU usage you describe. A dual 2GHz CPU server, though, should not. However, in the daily report we generate overnight that I got this a.m., the RemoteDeliver from yesterday was up to 22,000. I am looking into where these extra messages were generated from right now. [I am still a little concerned as to why the server was pegged at 100% for a double increase in usage; it seems to me the server should be able to handle much more than that.] If the server has an older CPU, or if the server is doing other tasks (SQL, web, etc.), that would explain the problem. When the server is at 100% CPU, when you use Task Manager, click on the Processes tab, and then click on the CPU button, what process(es) are closest to the top (using the most CPU)? One process at near 100% CPU usage? Several processes that together use up close to 100% CPU? -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com. --- [This message was Virus Scanned by GlobalWeb.net] --- [This message was Virus Scanned by GlobalWeb.net] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
Re: [Declude.Virus] Imail Queue Manager/SMTP at 100% after declude f-prot updates
Anyone else having problems with CPU at 100% after updating to Declude 1.78i27 and the f-prot 3.14e? I have reverted back to previous versions of both products and still no let up on CPU; spool directory just keeps climbing... If you go to the Task Manager, click on the Processes tab, and click the CPU button, it will sort the processes by CPU usage. Which process(es) are at the top with the highest CPU usage? -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] Imail Queue Manager/SMTP at 100% after declude f-prot updates
-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry Sent: Thursday, March 18, 2004 4:53 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.Virus] Imail Queue Manager/SMTP at 100% after declude f-prot updates Anyone else having problems with CPU at 100% after updating to Declude 1.78i27 and the f-prot 3.14e? I have reverted back to previous versions of both products and still no let up on CPU; spool directory just keeps climbing... If you go to the Task Manager, click on the Processes tab, and click the CPU button, it will sort the processes by CPU usage. Which process(es) are at the top with the highest CPU usage? -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com. --- The top 4 services cycles between Quemanager Declude (one to four instances) POP3d SMTPd If I stop declude, CPU goes back to normal (20-50%). Obviously, I do not want to do that and leave everything uprotected. (I can go without Spam filtering for a while; but not virus filtering. I have uninstalled F-Prot and re-installed it. Sincerely, Randy Armbrecht Global Web SolutionsR, Inc. 804-346-5300 ext. 1 877-800-GLOBAL (4562) ext. 1 http://globalweb.net --- [This message was Virus Scanned by GlobalWeb.net] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
Re: [Declude.Virus] [IMail Forum] New virus Bagle.J can't be caught by standard virus scanners
-Scott I'm in favor you competing the programming around the BANEXT EZIP line to include all files within the .zip file. I know I would like to from this point forward block encrypted zip files until there is a business reason for my company not to. If my virus scanners cannot scan the encrypted files for viruses this remains a risk. Scott Fisher Director of IT Farm Progress Companies [EMAIL PROTECTED] 03/03/04 08:08AM FYI, there is a new virus that came out yesterday, Bagle.J. It spreads in an encrypted .ZIP File. While an AV program can detect a normal virus in an encrypted .ZIP file (by the name, file length, or CRC (the fingerprint of the file)), Bagle.J uses random file names, random file sizes, and random CRCs. So it is unlikely that AV programs will be able to detect it. As a result, we are recommending that users of Declude Virus ban all .ZIP files that contain encrypted files. To do this, you need to be running the latest interim release, and add a line BANEXT EZIP to your virus.cfg file (it can go anywhere in the file). To get the latest interim release, you must be covered by a Service Agreement; you can download it from http://www.declude.com/interim . -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ --- [This E-mail scanned for viruses by Farm Progress Companies using Declude Virus] --- [This E-mail scanned for viruses by Farm Progress Companies using Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] Imail and Spyware Protection
Checking for Spyware would be the responsibility of a desktop application, not at the e-mail server level. Most Spyware is installed as the result of user internet browser use. John Tolmachoff Engineer/Consultant/Owner eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.Virus- [EMAIL PROTECTED] On Behalf Of Bridges, Samantha Sent: Monday, January 26, 2004 7:13 AM To: [EMAIL PROTECTED]; [EMAIL PROTECTED] Subject: [Declude.Virus] Imail and Spyware Protection Recently, I read an article about spyware. Does Declude or Imail address this issue with their product(s)? A quote from an article states: Network Associates will become the latest security software maker to address the growing problem of stealth surveillance software known as spyware. How do you know if spyware is on a PC? Does Declude or Imail identify and remove sneakly applications such as these? Here is the full article: MCAFEE ADDS SPYWARE PROTECTION Software will identify and remove sneaky applications. http://www.pcworld.com/news/article/0,aid,114421,tk,dn012304X,00.asp Thanks and I look forward to any responses. Samantha Bridges Communications Technician Macomb Intermediate School District 44001 Garfield Road Clinton Township MI 48038-1100 (586) 228-3300 [EMAIL PROTECTED] http://www.misd.net CONFIDENTIALITY NOTICE: This email message, including any attachments, is for the sole use of the intended recipient(s) and may contain confidential and privileged information. Any unauthorized review, use, disclosure or distribution is prohibited. If you are not the intended recipient, please contact the sender by reply email and destroy all copies of the original message. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
Re: [Declude.Virus] Imail and Spyware Protection
How do you know if spyware is on a PC? Does Declude or Imail identify and remove sneakly applications such as these? That is up to the AV program. Most AV programs do not attempt to detect spyware. However, if the AV program you use with Declude Virus is capable of detecting spyware, then it will get caught with Declude Virus. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you've been missing: Ask about our free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] Imail and Spyware Protection
Thanks scott. I use F-Prot and I don't know if they block this. I will check it out. Samantha -Original Message- From: R. Scott Perry [mailto:[EMAIL PROTECTED] Sent: Monday, January 26, 2004 10:20 AM To: [EMAIL PROTECTED] Subject: Re: [Declude.Virus] Imail and Spyware Protection How do you know if spyware is on a PC? Does Declude or Imail identify and remove sneakly applications such as these? That is up to the AV program. Most AV programs do not attempt to detect spyware. However, if the AV program you use with Declude Virus is capable of detecting spyware, then it will get caught with Declude Virus. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you've been missing: Ask about our free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] Imail and Spyware Protection
I use F-Prot and I don't know if they block this. I will check it out. They do not. Very, very few AV programs detect spyware. If you want to detect spyware sent in E-mail, it may be best to use a program like PestPatrol with Declude Virus in addition to F-Prot. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you've been missing: Ask about our free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
Re: [Declude.Virus] Imail and Spyware Protection
Pest Patrol is a spyware application that is support by Declude Virus, at least it is shown in the manual at http://www.declude.com/virus/manual.htm. Bill - Original Message - From: Bridges, Samantha [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Monday, January 26, 2004 7:49 AM Subject: RE: [Declude.Virus] Imail and Spyware Protection Thanks scott. I use F-Prot and I don't know if they block this. I will check it out. Samantha -Original Message- From: R. Scott Perry [mailto:[EMAIL PROTECTED] Sent: Monday, January 26, 2004 10:20 AM To: [EMAIL PROTECTED] Subject: Re: [Declude.Virus] Imail and Spyware Protection How do you know if spyware is on a PC? Does Declude or Imail identify and remove sneakly applications such as these? That is up to the AV program. Most AV programs do not attempt to detect spyware. However, if the AV program you use with Declude Virus is capable of detecting spyware, then it will get caught with Declude Virus. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you've been missing: Ask about our free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
Re: [Declude.Virus] Imail and Spyware Protection
Doesn't all spyware that comes via email run as an executable? I assume you can tell Imail to ditch all *.exe files and this would slow spyware down from the mail side. Since most spyware comes through Internet browsing on the desktop, I would recommend Lavasoft's Ad Aware. It's good and free. -Rob At 07:56 AM 1/26/2004 -0800, you wrote: Pest Patrol is a spyware application that is support by Declude Virus, at least it is shown in the manual at http://www.declude.com/virus/manual.htm. Bill - Original Message - From: Bridges, Samantha [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Monday, January 26, 2004 7:49 AM Subject: RE: [Declude.Virus] Imail and Spyware Protection Thanks scott. I use F-Prot and I don't know if they block this. I will check it out. Samantha -Original Message- From: R. Scott Perry [mailto:[EMAIL PROTECTED]] Sent: Monday, January 26, 2004 10:20 AM To: [EMAIL PROTECTED] Subject: Re: [Declude.Virus] Imail and Spyware Protection How do you know if spyware is on a PC? Does Declude or Imail identify and remove sneakly applications such as these? That is up to the AV program. Most AV programs do not attempt to detect spyware. However, if the AV program you use with Declude Virus is capable of detecting spyware, then it will get caught with Declude Virus. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you've been missing: Ask about our free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus. The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus. The archives can be found at http://www.mail-archive.com. Robert T. Jackson Product Management Rackspace Managed Hosting (210) 892-4000 ext. 1518
RE: [Declude.Virus] Imail and Spyware Protection
Remember though, most Spyware gets onto a users computer via Internet browsing usage and security configuration on the computer and in the browser, not through e-mail. John Tolmachoff Engineer/Consultant/Owner eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.Virus- [EMAIL PROTECTED] On Behalf Of Bill Landry Sent: Monday, January 26, 2004 7:56 AM To: [EMAIL PROTECTED] Subject: Re: [Declude.Virus] Imail and Spyware Protection Pest Patrol is a spyware application that is support by Declude Virus, at least it is shown in the manual at http://www.declude.com/virus/manual.htm. Bill - Original Message - From: Bridges, Samantha [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Monday, January 26, 2004 7:49 AM Subject: RE: [Declude.Virus] Imail and Spyware Protection Thanks scott. I use F-Prot and I don't know if they block this. I will check it out. Samantha -Original Message- From: R. Scott Perry [mailto:[EMAIL PROTECTED] Sent: Monday, January 26, 2004 10:20 AM To: [EMAIL PROTECTED] Subject: Re: [Declude.Virus] Imail and Spyware Protection How do you know if spyware is on a PC? Does Declude or Imail identify and remove sneakly applications such as these? That is up to the AV program. Most AV programs do not attempt to detect spyware. However, if the AV program you use with Declude Virus is capable of detecting spyware, then it will get caught with Declude Virus. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you've been missing: Ask about our free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] IMail server Memory Dump.
IM running 1.65 Kevin Shimwell Link Brokers Group, LLC ( Support ) 401 Ist Ave. North North Myrtle Beach, SC 29582 Phone: 843-663-1004 Fax: 843-663-1007 Email: [EMAIL PROTECTED] 24/7 Support http://www.linkbrokers.com/support_ticket.cfm Support M-F 1-888-546-5631 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of R. Scott Perry Sent: Tuesday, October 28, 2003 1:05 PM To: [EMAIL PROTECTED]; [EMAIL PROTECTED] Subject: Re: [Declude.Virus] IMail server Memory Dump. Anyone knows of any known problems with Imail and declude causing it to just shutting down and restart. ( The server that is. ) No, we're not aware of any such problems. You might want to send the information on the memory dump to Ipswitch, so they can see what happened. Declude version IM not sure. How do I find out. From the manual, you can type \IMail\Declude -diag from a command prompt to see which version you are running. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you've been missing: Ask about our free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
Re: [Declude.Virus] IMail server Memory Dump.
Anyone knows of any known problems with Imail and declude causing it to just shutting down and restart. ( The server that is. ) No, we're not aware of any such problems. You might want to send the information on the memory dump to Ipswitch, so they can see what happened. Declude version IM not sure. How do I find out. From the manual, you can type \IMail\Declude -diag from a command prompt to see which version you are running. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you've been missing: Ask about our free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
Re: [Declude.Virus] IMail 7.15 and F-Prot 3.14
Since upgrading to F-Prot 3.14 windows (without real-time) I've now seen web messaging lock up twice and I get a SMTP error on the IMail server. The error message (didn't write it down) is a pop-up window on the server. I'm running Declude Virus v1.70 also. F-Prot 3.14 shouldn't be able to cause an SMTP error. Are you using F-Prot.exe or fpcmd.exe (in the SCANFILE line in the \IMail\Declude\virus.cfg file)? If you are using F-Prot.exe, I would recommend switching to fpcmd.exe (and removing the /NOFLOPPY option in the SCANFILE line). Some servers have a very hard time dealing with lots of 16-bit processes (F-Prot.exe is 16-bit), and it could potentially account for web messaging locking up. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you have been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] IMail 7.15 and F-Prot 3.14
Since upgrading to F-Prot 3.14 windows (without real-time) I've now seen web messaging lock up twice and I get a SMTP error on the IMail server. The error message (didn't write it down) is a pop-up window on the server. I'm running Declude Virus v1.70 also. Chris, you know we need the error message. Maybe even a log snippet or 2. John Tolmachoff MCSE CSSA Engineer/Consultant eServices For You www.eservicesforyou.com --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] IMail 7.15 and F-Prot 3.14
I don't see anything unusual in the declude or imail logs and my virus.cfg has SCANFILE e:\F-Prot\Fpcmd.exe -TYPE -SILENT -NOMEM -ARCHIVE -NOBOOT -DUMB -REPORT=report.txt I'll have to wait until the next lockup/error message. Chris server. I'm running Declude Virus v1.70 also. Chris, you know we need the error message. Maybe even a log snippet or 2. F-Prot 3.14 shouldn't be able to cause an SMTP error. Are you using F-Prot.exe or fpcmd.exe (in the SCANFILE line in the \IMail\Declude\virus.cfg file)? If you are using F-Prot.exe, I would --- [This E-mail scanned for viruses by Declude/F-Prot AV] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
Re: [Declude.Virus] Imail v8.0 and Declude
Saturday, June 28, 2003 you wrote: AS Are there any caveats besides to not use the spam services of AS version 8 with Declude ? Seems the queuemgr is taking up way more AS processing time and slowing everything down to a crawl and we AS noticed a few declude processess running also I couldn't use the Qmanager cache. It gave delivery failures. Apparently it may have been a coincident or just me as others seem not to have had the problem. But I turned it off and everything began working fine for me. Terry Fritts --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
Re: [Declude.Virus] Imail v8.0 and Declude
You mean the dns cache and/or the bad domains thingamajig ? -- Original Message -- From: Smart Business Lists [EMAIL PROTECTED] Reply-To: [EMAIL PROTECTED] Date: Sat, 28 Jun 2003 11:49:44 -0500 Saturday, June 28, 2003 you wrote: AS Are there any caveats besides to not use the spam services of AS version 8 with Declude ? Seems the queuemgr is taking up way more AS processing time and slowing everything down to a crawl and we AS noticed a few declude processess running also I couldn't use the Qmanager cache. It gave delivery failures. Apparently it may have been a coincident or just me as others seem not to have had the problem. But I turned it off and everything began working fine for me. Terry Fritts --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus By Avolve.net] -- Avolve Support Get High Speed Internet - Go Wireless ! http://www.avolvewireless.net -- --- [This E-mail scanned for viruses by Declude Virus By Avolve.net] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
Re: [Declude.Virus] Imail v8.0 and Declude
Saturday, June 28, 2003 you wrote: AS You mean the dns cache and/or the bad domains thingamajig ? dns cache. But I turned the bad domains off, too. Terry Fritts --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
Re: [Declude.Virus] Imail v8.0 and Declude
Dag gone it, it didn't work for me. -- Original Message -- From: Smart Business Lists [EMAIL PROTECTED] Reply-To: [EMAIL PROTECTED] Date: Sat, 28 Jun 2003 14:48:57 -0500 Saturday, June 28, 2003 you wrote: AS You mean the dns cache and/or the bad domains thingamajig ? dns cache. But I turned the bad domains off, too. Terry Fritts --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus By Avolve.net] -- Avolve Support Get High Speed Internet - Go Wireless ! http://www.avolvewireless.net -- --- [This E-mail scanned for viruses by Declude Virus By Avolve.net] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] Imail List problems?
Looks like they are having problems with their Imai AntiVirus. Uhmm.. that happens when you don't use Declude :-) OK Scott, what did you do to their server? ;) You caught me -- I neglected to urge them to run Declude Virus on their live servers. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] \IMail\Spool\.vir folders with version 1.63
If you were using an interim release of 1.63 you need to use the latest version. John Tolmachoff MCSE, CSSA IT Manager, Network Engineer RelianceSoft, Inc. Fullerton, CA 92835 www.reliancesoft.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Declude Virus Sent: Monday, December 02, 2002 1:02 PM To: [EMAIL PROTECTED] Subject: [Declude.Virus] \IMail\Spool\.vir folders with version 1.63 I noticed a number of D*.vir folders being created under \Imail\Spool since I started running version 1.63. Approximately 2600 folders were created over the last week. I'm using F-Prot as my scanner and haven't made any changes to it except definition updates. I've switched back to 1.60 and the folders are no longer being created - so there is no panic. Below is a log file snippet (level at MID): 12/02/2002 02:05:49 Q064c576702f6c5a3 (Error 5 at 42b90a v1.63) 12/02/2002 02:05:49 Q064c576702f6c5a3 (log part 2 saved as C:\declude.gp2) 12/02/2002 02:05:49 Q064c576702f6c5a3 (log part 1 saved as C:\declude.gp1) 12/02/2002 02:05:51 Q064f374d035acedb (Error 5 at 42b90a v1.63) 12/02/2002 02:05:51 Q064f374d035acedb (log part 2 saved as C:\declude.gp2) 12/02/2002 02:05:51 Q064f374d035acedb (log part 1 saved as C:\declude.gp1) Let me know if I can be of further help with tracking down this issue. -Bill Naber --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com. found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
Re: [Declude.Virus] \IMail\Spool\.vir folders with version 1.63
12/02/2002 02:05:49 Q064c576702f6c5a3 (Error 5 at 42b90a v1.63) 12/02/2002 02:05:49 Q064c576702f6c5a3 (log part 2 saved as C:\declude.gp2) 12/02/2002 02:05:49 Q064c576702f6c5a3 (log part 1 saved as C:\declude.gp1) There was an issue with 1.63 that could cause this, that is fixed in the latest interim release. We should be releasing v1.64 (beta) in the next few days that will also take care of this. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
Re: [Declude.Virus] \IMail\Spool\.vir folders with version 1.63
Thanks guys, I'll keep an eye out for 1.64. -Bill Naber -- Original Message -- From: R. Scott Perry [EMAIL PROTECTED] Reply-To: [EMAIL PROTECTED] Date: Mon, 02 Dec 2002 16:28:29 -0500 12/02/2002 02:05:49 Q064c576702f6c5a3 (Error 5 at 42b90a v1.63) 12/02/2002 02:05:49 Q064c576702f6c5a3 (log part 2 saved as C:\declude.gp2) 12/02/2002 02:05:49 Q064c576702f6c5a3 (log part 1 saved as C:\declude.gp1) There was an issue with 1.63 that could cause this, that is fixed in the latest interim release. We should be releasing v1.64 (beta) in the next few days that will also take care of this. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] Imail/Declude Log Analyzer v1.32
That's pretty much all that changed. It depends how far back you started using usage.cmd. If you started at 1.0-1.2 you'll probably want to start fresh. Jeff -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Sheldon Koehler Sent: Thursday, February 28, 2002 10:56 AM To: [EMAIL PROTECTED] Subject: Re: [Declude.Virus] Imail/Declude Log Analyzer v1.32 This version should deal with the 1st day of the month and leap years. Can we just cut and paste the first of the month and leap year sections or did you change a lot more? Sheldon --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
Re: [Declude.Virus] [IMail Forum] [Kinda OT... It's A Gloat] Declude And F-Prot - What Else...
I changed lists to declude as it's more relevant. the auto update is nice but IMO the scheduled bat file is nicer. I slightly modified the ftp script to include a dir list of the *.def files before and after getting the updated files. The info is e-mailed to me in the script. that way, I know in the morning if I have new def files from the prior night also I know that it worked as I get results in e-mail as well... bob On Friday, December 14, 2001 1:52 PM, T. Bradley Dean [EMAIL PROTECTED] wrote: It's Friday so I figured gloating would be allowed... Declude caught two virus attachments this morning! Both, as luck would have it, were sent to aliases that forward to a list of 6 Outlook (clueless) managers and cube dwellers. And the specific attachments were not ones that would have been caught by my old rules.ima file - which is what I used for virus protection up until earlier this week. Thanks go out to Declude, F-Prot, and (of course) to this list. One note: I decided to switch from F-Prot DOS to F-Prot Windows. It's twice the price but still dirt cheap, and as another list member said - the automatic updates make all the difference! ~Brad Please visit http://www.ipswitch.com/support/mailing-lists.html to be removed from this list. An Archive of this list is available at: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
