RE: [Declude.JunkMail] 4.3.x and 3.1.x planned release

2006-09-19 Thread David Barker
No,  NONSTANDARDHDR is only needed in the virus.cfg if you want to turn this
vulnerability test off.

David B
www.declude.com

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mike
Wiegers
Sent: Monday, September 18, 2006 10:32 PM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] 4.3.x and 3.1.x planned release

I didn't notice a reply to this. Do you need to add the NONSTANDARDHDR test
to the config file?

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Gary
Steiner
Sent: Friday, September 15, 2006 12:11 PM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] 4.3.x and 3.1.x planned release

David,

Is the NONSTANDARDHDR test on by default, or do you need to add it to your
virus.cfg file?  I've been running every version since 4.2.20, and I have
never seen a message with a broken header moved to my \virus folder.

Gary



 Original Message 
> From: "David Barker" <[EMAIL PROTECTED]>
> Sent: Friday, September 15, 2006 11:42 AM
> To: declude.junkmail@declude.com
> Subject: RE: [Declude.JunkMail] 4.3.x and 3.1.x planned release
> 
> Dave,
> 
> We had implemented a fix for the broken image spam, in 4.2.20 
> 
> New NONSTANDARDHDR vulnerability test. Messages found to have broken
headers
> are moved to the \virus folder
> 
> I do know of reports of broken headers still happening and we are 
> re-evaluating this test to see if we can make it better. If you are
running
> 4.2.20 or later and are still having problems with the broken images 
> could you please send examples to support so we could look at them.
> 
> Thanks
> David B.
> www.declude.com
> 
> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of 
> Dave Beckstrom
> Sent: Friday, September 15, 2006 11:14 AM
> To: declude.junkmail@declude.com
> Subject: RE: [Declude.JunkMail] 4.3.x and 3.1.x planned release
> 
> Still no fix for the broken image spam? 
> 
> 
> 
> 
> > -Original Message-
> > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of 
> > David Barker
> > Sent: Friday, September 15, 2006 7:59 AM
> > To: declude.junkmail@declude.com; declude.virus@declude.com
> > Subject: [Declude.JunkMail] 4.3.x and 3.1.x planned release
> > 
> > The following items are being tested for Target Date release: 27 
> > September
> > 2006
> > 
> > 4.3.x
> > --
> > 
> > DEC FIX On occasion ZEROHOUR initialized two overlaping threads
> > causing decludeproc crash
> > 
> > JM  FIX IPBYPASS now takes place before WHITELIST
> > 
> > JM  FIX X-COUNTRYCHAIN log entry no longer truncated
> > 
> > JM  FIX DELETE_RECIPIENT removes the specified email address as
> > per-user action only
> > 
> > JM  FIX With HOLD if extra space after %DATE% incorrect behaviour
> > was observed this is not been normalized
> > 
> > HI  FIX CONCATENATELOGS with KEEPINDIVIDUALLOGS works correctly
> > 
> > JM  ADD BANCHARSET defined in the declude.cfg quarentines listed
> > character sets
> > 
> > EVA ADD With AVAFTERJM ON the JM Log displays message moved to virus
> > folder
> > 
> > 3.1.x
> > --
> > 
> > JM  FIX IPBYPASS now takes place before WHITELIST
> > 
> > JM  FIX X-COUNTRYCHAIN log entry no longer truncated
> > 
> > JM  FIX DELETE_RECIPIENT removes the specified email address as
> > per-user action only
> > 
> > JM  FIX With HOLD if extra space after %DATE% incorrect behaviour
> > was observed this is not been normalized
> > 
> > JM  FIX Declude crash fix. Buffer Overflow reading the From:
line in
> > the Headers
> > 
> > HI  FIX CONCATENATELOGS with KEEPINDIVIDUALLOGS works correctly
> > 
> > SM  ADD Decludeproc will not start without a valid
domainlist.xml
> > 
> > In addition to bug fixes we are also working on wishlist items that 
> > we
> have
> > received regarding new tests. If you have any ideas of new tests you 
> > would like to see implemented please email your thoughts to me 
> > directly [EMAIL PROTECTED]
> > 
> > Thanks
> > David B
> > www.declude.com
> > 
> > 
> > 
> > ---
> > This E-mail came from the Declude.JunkMail mailing list.  To 
> > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type 
> > "unsubscribe Declude.JunkMail".  The archives can be found at 
> > http://www.mail-archive.com.
> 
> 
> 

RE: [Declude.JunkMail] 4.3.x and 3.1.x planned release

2006-09-18 Thread Mike Wiegers
I didn't notice a reply to this. Do you need to add the NONSTANDARDHDR test
to the config file?

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Gary
Steiner
Sent: Friday, September 15, 2006 12:11 PM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] 4.3.x and 3.1.x planned release

David,

Is the NONSTANDARDHDR test on by default, or do you need to add it to your
virus.cfg file?  I've been running every version since 4.2.20, and I have
never seen a message with a broken header moved to my \virus folder.

Gary



 Original Message 
> From: "David Barker" <[EMAIL PROTECTED]>
> Sent: Friday, September 15, 2006 11:42 AM
> To: declude.junkmail@declude.com
> Subject: RE: [Declude.JunkMail] 4.3.x and 3.1.x planned release
> 
> Dave,
> 
> We had implemented a fix for the broken image spam, in 4.2.20 
> 
> New NONSTANDARDHDR vulnerability test. Messages found to have broken
headers
> are moved to the \virus folder 
> 
> I do know of reports of broken headers still happening and we are
> re-evaluating this test to see if we can make it better. If you are
running
> 4.2.20 or later and are still having problems with the broken images could
> you please send examples to support so we could look at them.
> 
> Thanks
> David B.
> www.declude.com
> 
> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dave
> Beckstrom
> Sent: Friday, September 15, 2006 11:14 AM
> To: declude.junkmail@declude.com
> Subject: RE: [Declude.JunkMail] 4.3.x and 3.1.x planned release
> 
> Still no fix for the broken image spam? 
> 
> 
> 
> 
> > -Original Message-
> > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of 
> > David Barker
> > Sent: Friday, September 15, 2006 7:59 AM
> > To: declude.junkmail@declude.com; declude.virus@declude.com
> > Subject: [Declude.JunkMail] 4.3.x and 3.1.x planned release
> > 
> > The following items are being tested for Target Date release: 27 
> > September
> > 2006
> > 
> > 4.3.x
> > --
> > 
> > DEC FIX On occasion ZEROHOUR initialized two overlaping threads
> > causing decludeproc crash
> > 
> > JM  FIX IPBYPASS now takes place before WHITELIST
> > 
> > JM  FIX X-COUNTRYCHAIN log entry no longer truncated
> > 
> > JM  FIX DELETE_RECIPIENT removes the specified email address as
> > per-user action only
> > 
> > JM  FIX With HOLD if extra space after %DATE% incorrect behaviour
> > was observed this is not been normalized
> > 
> > HI  FIX CONCATENATELOGS with KEEPINDIVIDUALLOGS works correctly
> > 
> > JM  ADD BANCHARSET defined in the declude.cfg quarentines listed
> > character sets
> > 
> > EVA ADD With AVAFTERJM ON the JM Log displays message moved to virus
> > folder
> > 
> > 3.1.x
> > --
> > 
> > JM  FIX IPBYPASS now takes place before WHITELIST
> > 
> > JM  FIX X-COUNTRYCHAIN log entry no longer truncated
> > 
> > JM  FIX DELETE_RECIPIENT removes the specified email address as
> > per-user action only
> > 
> > JM  FIX With HOLD if extra space after %DATE% incorrect behaviour
> > was observed this is not been normalized
> > 
> > JM  FIX Declude crash fix. Buffer Overflow reading the From:
line in
> > the Headers
> > 
> > HI  FIX CONCATENATELOGS with KEEPINDIVIDUALLOGS works correctly
> > 
> > SM  ADD Decludeproc will not start without a valid
domainlist.xml
> > 
> > In addition to bug fixes we are also working on wishlist items that we
> have
> > received regarding new tests. If you have any ideas of new tests you 
> > would like to see implemented please email your thoughts to me 
> > directly [EMAIL PROTECTED]
> > 
> > Thanks
> > David B
> > www.declude.com
> > 
> > 
> > 
> > ---
> > This E-mail came from the Declude.JunkMail mailing list.  To 
> > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type 
> > "unsubscribe Declude.JunkMail".  The archives can be found at 
> > http://www.mail-archive.com.
> 
> 
> 
> 
> 
> ---
> This E-mail came from the Declude.JunkMail mailing list.  To unsubscribe,
> just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe
> Declude.JunkMail".  The archives can be found at
> http://www.mail-archive.com.
> 
> 
> 
> ---
> This E-mail came from the Declude.JunkMail mailing list.  To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.JunkMail".  The archives can be found
> at http://www.mail-archive.com. 





---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.




---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.



RE: [Declude.JunkMail] 4.3.x and 3.1.x planned release

2006-09-15 Thread Gary Steiner
David,

Is the NONSTANDARDHDR test on by default, or do you need to add it to your 
virus.cfg file?  I've been running every version since 4.2.20, and I have never 
seen a message with a broken header moved to my \virus folder.

Gary



 Original Message 
> From: "David Barker" <[EMAIL PROTECTED]>
> Sent: Friday, September 15, 2006 11:42 AM
> To: declude.junkmail@declude.com
> Subject: RE: [Declude.JunkMail] 4.3.x and 3.1.x planned release
> 
> Dave,
> 
> We had implemented a fix for the broken image spam, in 4.2.20
> 
> New NONSTANDARDHDR vulnerability test. Messages found to have broken headers
> are moved to the \virus folder 
> 
> I do know of reports of broken headers still happening and we are
> re-evaluating this test to see if we can make it better. If you are running
> 4.2.20 or later and are still having problems with the broken images could
> you please send examples to support so we could look at them.
> 
> Thanks
> David B.
> www.declude.com
> 
> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dave
> Beckstrom
> Sent: Friday, September 15, 2006 11:14 AM
> To: declude.junkmail@declude.com
> Subject: RE: [Declude.JunkMail] 4.3.x and 3.1.x planned release
> 
> Still no fix for the broken image spam? 
> 
> 
> 
> 
> > -Original Message-
> > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of 
> > David Barker
> > Sent: Friday, September 15, 2006 7:59 AM
> > To: declude.junkmail@declude.com; declude.virus@declude.com
> > Subject: [Declude.JunkMail] 4.3.x and 3.1.x planned release
> > 
> > The following items are being tested for Target Date release: 27 
> > September
> > 2006
> > 
> > 4.3.x
> > --
> > 
> > DEC FIX On occasion ZEROHOUR initialized two overlaping threads
> > causing decludeproc crash
> > 
> > JM  FIX IPBYPASS now takes place before WHITELIST
> > 
> > JM  FIX X-COUNTRYCHAIN log entry no longer truncated
> > 
> > JM  FIX DELETE_RECIPIENT removes the specified email address as
> > per-user action only
> > 
> > JM  FIX With HOLD if extra space after %DATE% incorrect behaviour
> > was observed this is not been normalized
> > 
> > HI  FIX CONCATENATELOGS with KEEPINDIVIDUALLOGS works correctly
> > 
> > JM  ADD BANCHARSET defined in the declude.cfg quarentines listed
> > character sets
> > 
> > EVA ADD With AVAFTERJM ON the JM Log displays message moved to virus
> > folder
> > 
> > 3.1.x
> > --
> > 
> > JM  FIX IPBYPASS now takes place before WHITELIST
> > 
> > JM  FIX X-COUNTRYCHAIN log entry no longer truncated
> > 
> > JM  FIX DELETE_RECIPIENT removes the specified email address as
> > per-user action only
> > 
> > JM  FIX With HOLD if extra space after %DATE% incorrect behaviour
> > was observed this is not been normalized
> > 
> > JM  FIX Declude crash fix. Buffer Overflow reading the From: 
> > line in
> > the Headers
> > 
> > HI  FIX CONCATENATELOGS with KEEPINDIVIDUALLOGS works correctly
> > 
> > SM  ADD Decludeproc will not start without a valid 
> > domainlist.xml
> > 
> > In addition to bug fixes we are also working on wishlist items that we
> have
> > received regarding new tests. If you have any ideas of new tests you 
> > would like to see implemented please email your thoughts to me 
> > directly [EMAIL PROTECTED]
> > 
> > Thanks
> > David B
> > www.declude.com
> > 
> > 
> > 
> > ---
> > This E-mail came from the Declude.JunkMail mailing list.  To 
> > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type 
> > "unsubscribe Declude.JunkMail".  The archives can be found at 
> > http://www.mail-archive.com.
> 
> 
> 
> 
> 
> ---
> This E-mail came from the Declude.JunkMail mailing list.  To unsubscribe,
> just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe
> Declude.JunkMail".  The archives can be found at
> http://www.mail-archive.com.
> 
> 
> 
> ---
> This E-mail came from the Declude.JunkMail mailing list.  To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.JunkMail".  The archives can be found
> at http://www.mail-archive.com. 





---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.



RE: [Declude.JunkMail] 4.3.x and 3.1.x planned release

2006-09-15 Thread David Barker
Dave,

We had implemented a fix for the broken image spam, in 4.2.20   

New NONSTANDARDHDR vulnerability test. Messages found to have broken headers
are moved to the \virus folder 

I do know of reports of broken headers still happening and we are
re-evaluating this test to see if we can make it better. If you are running
4.2.20 or later and are still having problems with the broken images could
you please send examples to support so we could look at them.

Thanks
David B.
www.declude.com

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dave
Beckstrom
Sent: Friday, September 15, 2006 11:14 AM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] 4.3.x and 3.1.x planned release

Still no fix for the broken image spam? 




> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of 
> David Barker
> Sent: Friday, September 15, 2006 7:59 AM
> To: declude.junkmail@declude.com; declude.virus@declude.com
> Subject: [Declude.JunkMail] 4.3.x and 3.1.x planned release
> 
> The following items are being tested for Target Date release: 27 
> September
> 2006
> 
> 4.3.x
> --
> 
> DEC   FIX On occasion ZEROHOUR initialized two overlaping threads
> causing decludeproc crash
> 
> JMFIX IPBYPASS now takes place before WHITELIST
> 
> JMFIX X-COUNTRYCHAIN log entry no longer truncated
> 
> JMFIX DELETE_RECIPIENT removes the specified email address as
> per-user action only
> 
> JMFIX With HOLD if extra space after %DATE% incorrect behaviour
> was observed this is not been normalized
> 
> HIFIX CONCATENATELOGS with KEEPINDIVIDUALLOGS works correctly
> 
> JMADD BANCHARSET defined in the declude.cfg quarentines listed
> character sets
> 
> EVA   ADD With AVAFTERJM ON the JM Log displays message moved to virus
> folder
> 
> 3.1.x
> --
> 
> JMFIX IPBYPASS now takes place before WHITELIST
> 
> JMFIX X-COUNTRYCHAIN log entry no longer truncated
> 
> JMFIX DELETE_RECIPIENT removes the specified email address as
> per-user action only
> 
> JMFIX With HOLD if extra space after %DATE% incorrect behaviour
> was observed this is not been normalized
> 
> JMFIX Declude crash fix. Buffer Overflow reading the From: line in
> the Headers
> 
> HIFIX CONCATENATELOGS with KEEPINDIVIDUALLOGS works correctly
> 
> SMADD Decludeproc will not start without a valid domainlist.xml
> 
> In addition to bug fixes we are also working on wishlist items that we
have
> received regarding new tests. If you have any ideas of new tests you 
> would like to see implemented please email your thoughts to me 
> directly [EMAIL PROTECTED]
> 
> Thanks
> David B
> www.declude.com
> 
> 
> 
> ---
> This E-mail came from the Declude.JunkMail mailing list.  To 
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type 
> "unsubscribe Declude.JunkMail".  The archives can be found at 
> http://www.mail-archive.com.





---
This E-mail came from the Declude.JunkMail mailing list.  To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe
Declude.JunkMail".  The archives can be found at
http://www.mail-archive.com.



---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.



RE: [Declude.JunkMail] 4.3.x and 3.1.x planned release

2006-09-15 Thread Dave Beckstrom
Still no fix for the broken image spam? 




> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David
> Barker
> Sent: Friday, September 15, 2006 7:59 AM
> To: declude.junkmail@declude.com; declude.virus@declude.com
> Subject: [Declude.JunkMail] 4.3.x and 3.1.x planned release
> 
> The following items are being tested for Target Date release: 27 September
> 2006
> 
> 4.3.x
> --
> 
> DEC   FIX On occasion ZEROHOUR initialized two overlaping threads
> causing decludeproc crash
> 
> JMFIX IPBYPASS now takes place before WHITELIST
> 
> JMFIX X-COUNTRYCHAIN log entry no longer truncated
> 
> JMFIX DELETE_RECIPIENT removes the specified email address as
> per-user action only
> 
> JMFIX With HOLD if extra space after %DATE% incorrect behaviour
> was observed this is not been normalized
> 
> HIFIX CONCATENATELOGS with KEEPINDIVIDUALLOGS works correctly
> 
> JMADD BANCHARSET defined in the declude.cfg quarentines listed
> character sets
> 
> EVA   ADD With AVAFTERJM ON the JM Log displays message moved to virus
> folder
> 
> 3.1.x
> --
> 
> JMFIX IPBYPASS now takes place before WHITELIST
> 
> JMFIX X-COUNTRYCHAIN log entry no longer truncated
> 
> JMFIX DELETE_RECIPIENT removes the specified email address as
> per-user action only
> 
> JMFIX With HOLD if extra space after %DATE% incorrect behaviour
> was observed this is not been normalized
> 
> JMFIX Declude crash fix. Buffer Overflow reading the From: line in
> the Headers
> 
> HIFIX CONCATENATELOGS with KEEPINDIVIDUALLOGS works correctly
> 
> SMADD Decludeproc will not start without a valid domainlist.xml
> 
> In addition to bug fixes we are also working on wishlist items that we
have
> received regarding new tests. If you have any ideas of new tests you would
> like to see implemented please email your thoughts to me directly
> [EMAIL PROTECTED]
> 
> Thanks
> David B
> www.declude.com
> 
> 
> 
> ---
> This E-mail came from the Declude.JunkMail mailing list.  To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.JunkMail".  The archives can be found
> at http://www.mail-archive.com.





---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.