Best wishes in all of your endeavors, Alex!
Darin.
- Original Message -
From: Hirthe, Alexander
To: 'declude.virus@declude.com'
Sent: Tuesday, June 23, 2009 5:08 AM
Subject: [Declude.Virus] Goodbye
Goodbye to all of you, I'm leaving the company and I don't think I'll get in
touch
Wow, what a way to respond to a long-time, loyal paying customer! Instead of
apologizing for the serious problem and relaying what steps are being taken to
avoid it happening again (a simple reminder in the calendar system of your
choice would suffice), it's being thrown back in the customer's
My payment history is more like Andy's. We paid $264-$295 annually for our
service agreements (JunkMail/Virus) from 2002 to 2006. We never had HiJack.
Darin.
- Original Message -
From: David Barker
To: declude.virus@declude.com
Sent: Wednesday, June 03, 2009 1:50 PM
Subject: RE:
AM
Subject: Re: [Declude.Virus] F-PROT 6 vs ClamAV SOSDG
I have bought declude anti-virus, not declude anti-spam.
- Original Message -
From: Darin Cox [EMAIL PROTECTED]
To: declude.virus@declude.com
Sent: Saturday, June 14, 2008 12:55 AM
Subject: Re: [Declude.Virus] F-PROT 6 vs ClamAV
is , for REPORT=report.txt
do we need ? REPORT=report.txt
from instruction here, looks like need
http://www.f-prot.com/support/windows/fpwin_faq/445.html
but most users online post seems is not necessary.
- Original Message -
From: Darin Cox [EMAIL PROTECTED]
To: declude.virus
: Brian Lin [EMAIL PROTECTED]
To: declude.virus@declude.com
Sent: Friday, June 13, 2008 8:55 AM
Subject: Re: [Declude.Virus] F-PROT 6 vs ClamAV SOSDG
No, I am still using antique version declude and
imail.
- Original Message -
From: Darin Cox [EMAIL PROTECTED]
To: declude.virus
, reduce scanlevel=1 /heurlevel=0,
all can not work.
Only when I add in noboot or nomem, the CPU immediate
get releaf, but this is not working, because with noboot or nomen.
the scanner simply not working at all.
- Original Message -
From: Darin Cox [EMAIL PROTECTED]
To: declude.virus
Assuming the default location for program installation, here you go.
SCANFILE C:\PROGRA~1\FRISKS~1\F-PROT~1\fpscan.exe /VERBOSE=0 /ARCHIVE=5
/scanlevel=4 /heurlevel=3 /REPORT=report.txt
/VERBOSE=0 corresponds to the old /SILENT switch
/TYPE is assumed now
/ARCHIVE has changed to /ARCHIVE=5
Yes. It's expensive, but is still a good and efficient scanner. Kaspersky
and AVG combined may be a good way to go for lower cost if you can afford
the CPU of two scanners, or perhaps just Kaspersky.
Not sure if anyone has good stats on the performance, completeness of
rulebases, and time
is phenomenal.
--SJ
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
Darin Cox
Sent: Tuesday, June 03, 2008 2:39 PM
To: declude.virus@declude.com
Subject: Re: [Declude.Virus] F-PROT 6
Yes. It's expensive, but is still a good and efficient scanner
We got slammed with them today as well. It caught a bunch that made it past
spam filtering (we run AVAFTERJM ON). So I'd second that recommendation to
NOT turn it off. If you're concerned about delivery, set up an email
notification to let the intended recipient know the message was held,
The point is you may let some not-yet-detected viruses through, but in any case
you can do that with a switch in the virus.cfg.
Darin.
- Original Message -
From: Heimir Eidskrem
To: declude.virus@declude.com
Sent: Tuesday, July 31, 2007 6:23 PM
Subject: Re: [Declude.Virus] [Invalid
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
Darin Cox
Sent: Tuesday, July 31, 2007 5:34 PM
To: declude.virus@declude.com
Subject: Re: [Declude.Virus] [Invalid ZIP Vulnerability]
We use this vulnerability.eml
Yep... spammers are now using PDFs for their payload.
Darin.
- Original Message -
From: Todd Richards [EMAIL PROTECTED]
To: declude.virus@declude.com
Sent: Tuesday, June 26, 2007 10:48 AM
Subject: [Declude.Virus] Virus or Junk?
Hey Everyone -
Last night I received a junk mail with
It would be wonderful to be able to send out notifications on vulnerabilities
like the current notifications on virus found/banned files.
We still have to process the virus queue due to legit email that may be held
due to vulnerabilities that we do not want to turn off in the config. For
] On Behalf Of Darin Cox
Sent: Friday, May 25, 2007 6:48 AM
To: Declude.Virus@declude.com
Subject: [Declude.Virus] Feature request - Notification emails generated on
vulnerabilities
It would be wonderful to be able to send out notifications on vulnerabilities
like the current notifications on virus
Slightly OT, but can anyone recommend a good source for the command line
version of McAfee?
Darin.
- Original Message -
From: Andy Schmidt
To: declude.virus@declude.com
Sent: Tuesday, March 06, 2007 11:09 AM
Subject: RE: [Declude.Virus] Clam AV vs. AVG vs. McAfee
That's my
Isn't that basically what the spamdomains test does? Specifies what domains
a mail server can be in that sends for a particular domain...
Darin.
- Original Message -
From: David Barker [EMAIL PROTECTED]
To: declude.virus@declude.com
Sent: Thursday, February 15, 2007 7:22 PM
Subject:
Message Sniffer does a pretty good job. You can also use the spamdomains
and SPF tests, though their SPF policy is only soft fail at the moment,
which Declude does not check.
Darin.
- Original Message -
From: Bob McGregor [EMAIL PROTECTED]
To: Declude-List Declude.Virus@declude.com
75 over 45 minutes. Dumb...
Darin.
- Original Message -
From: Colbeck, Andrew [EMAIL PROTECTED]
To: declude.virus@declude.com
Sent: Thursday, January 04, 2007 4:12 PM
Subject: RE: [Declude.Virus] I'm currently on a business trip down south and
will be returning January 5th, 2007. If t
Ok, this makes it over a hundred received this afternoon.
Declude, would you kindly remove him from the list so we don't all get
inundated with more autoreplies?
Also, this is a gentle reminder to be a good list netizen and don't use
autoresponders for addresses that you use to subscribe to
Evidently they are also interfering with the list. My other post at 74
count just now showed up over an hour later.
Darin.
- Original Message -
From: Darin Cox [EMAIL PROTECTED]
To: declude.virus@declude.com
Sent: Thursday, January 04, 2007 5:42 PM
Subject: Re: [Declude.Virus] I'm
I posted virustotal results a half hour ago... did you see them?
Darin.
- Original Message -
From: Grant Griffith [EMAIL PROTECTED]
To: declude.virus@declude.com
Sent: Tuesday, October 10, 2006 2:17 PM
Subject: RE: [Declude.Virus] New Virus?
It does have a .zip file that contains a
So what will happen to customers on SAs at that time? See why we're asking
the questions?
Darin.
- Original Message -
From: Barry Simpson [EMAIL PROTECTED]
To: Declude.Virus@declude.com
Sent: Sunday, February 12, 2006 9:58 AM
Subject: RE: [Declude.Virus] Changes @ Declude
Don,
You
PROTECTED] On Behalf Of Darin Cox
Sent: Sunday, February 12, 2006 10:04 AM
To: Declude.Virus@declude.com
Subject: Re: [Declude.Virus] Changes @ Declude
So what will happen to customers on SAs at that time? See
why we're asking the questions?
Darin.
- Original Message -
From
I didn't receive it either. I checked the
logs and nothing came in from Declude.
Darin.
- Original Message -
From: Scott
Fisher
To: Declude.Virus@declude.com
Sent: Friday, February 10, 2006 2:24 PM
Subject: Re: [Declude.Virus] Changes @ Declude
-Barry,
I did not receive the
By running AVAFTERJM, you can use spam filtering to eliminate banned files
that you would otherwise have to review in the virus hold queue. The
drawback is that marginal emails are not identified as banned files, but on
our system at least, running AVAFTERJM means less to review.
Darin.
-
Interesting, Andrew. We've run AVAFTERJM for the same reasons, and have
been considering doing something to remove the viruses from the spam hold
queue as well.
Speaking of which, I'd like to re-request a feature from Declude to be able
to selectively notify on detected vulnerabilities. We have
Please turn off your postmaster notifications for
detected virii, or utilize the ability to avoid sending notifications for
forging viruses.
Thanks,
Darin.
Yeah, maintaining BANNAMEs is not a good long-term solution. I've tripled
my list in the last week with the new variants.
Since filenames are becoming more dynamic, and we will most likely start
seeing significant overlap with legitimate filenames soon, I would amend
this by having the DNS-based
block PPS files.
John T
eServices For You
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]
On Behalf Of Darin Cox
Sent: Wednesday, November 23, 2005 7:00 AM
To: Declude.Virus@declude.com
Subject: Re: [Declude.Virus] Blocking PIF Files
Here's a list compiled over
Totally agree with you there, Sandy. We're trying to decide whether to
renew the service agreement. We paid for a year and haven't upgraded at all
due to the stability problems and bugs with 2.x and 3.x, though we are
considering upgrading to IMail 2006 and 3.0 soon. Things seem to have
settled
If you also want to block them in zips and encrypted zip:
BANZIPEXTS ON
BANEZIPEXTS ON
Only works in Virus Pro. He said he has Virus Standard.
Darin.
- Original Message -
From: Info Wind [EMAIL PROTECTED]
To: Declude.Virus@declude.com
Sent: Wednesday, November 23, 2005 9:47 AM
Here's a list compiled over the years of extensions we ban. The top two you
will want to consider your userbase before banning, the rest should be fine.
Note that we couple this with a banned file notification to the intended
recipient, which includes a link to requeue the file for delivery if it
Subject: Re: [Declude.Virus] New Virus Strain Pounding my systems
Darin,
Would you add these to virus.cfg? Similir to BANEXT?
Thanks,
Dan
- Original Message -
From: Darin Cox [EMAIL PROTECTED]
To: Declude.Virus@declude.com
Sent: Monday, November 21, 2005 5:04 PM
Subject: Re: [Declude.Virus
the notices from other postmasters - I have
almost no bounce messages, I don't notify on banned files and so on for just
that very reason.
-- Original Message --
From: Darin Cox [EMAIL PROTECTED]
Reply-To: Declude.Virus@declude.com
Date: Wed, 23 Nov 2005 10:02:38
BANNAME Judeth.zip
BANNAME Katheryne.zip
BANNAME Margerye.zip
BANNAME Marie.zip
BANNAME Martha.zip
BANNAME Marye.zip
BANNAME Nathaniel.zip
BANNAME Nathanyell.zip
Darin.
- Original Message -
From: Darin Cox [EMAIL PROTECTED]
To: Declude.Virus@declude.com
Sent: Wednesday, November 23, 2005 3
For those of us poor saps who don't have Pro, here's a compiled list from a
couple of sources of zip filenames to ban.
Due to the variation in filenames, it would be useful to have BANNAME allow
some minimal pattern matching. That would have made this list a bit
shorter.
# Added 11/21/2005 to
I just went through all of the reports. Here's a list of new filenames to
ban:
# Added 11/15/2005 to handle new Sober.R, S, T, U, V, W variants
BANNAME email_photo.zip
BANNAME excel_table.zip
BANNAME liste.zip
BANNAME reg_text.zip
BANNAME registration.zip
BANNAME tabelle.zip
Darin.
-
and word-text.zip
Uwe
P.S.: Thank you, Darin for the list.
- Original Message -
From: Darin Cox [EMAIL PROTECTED]
To: Declude.Virus@declude.com
Sent: Tuesday, November 15, 2005 2:33 PM
Subject: Re: [Declude.Virus] New Sober to be released, possible variation?
I just went through all
, as they are still not
detecting the variant I've been receiving since this thread started.
Andrew 8)
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Darin Cox
Sent: Tuesday, November 15, 2005 6:05 AM
To: Declude.Virus@declude.com
Subject: Re: [Declude.Virus] New
Yep...seeing them here as well.
Darin.
- Original Message -
From: John T (Lists) [EMAIL PROTECTED]
To: Declude.Virus@declude.com
Sent: Monday, November 14, 2005 7:57 PM
Subject: RE: [Declude.Virus] New Sober to be released Nov-15-2005 ?
Well, I am not sure about tomorrow, but in the
See "15. Banning files based on extension in the
manual"
http://www.declude.com/Version/Manuals/EVA/EVA_2.0.6.asp
Note that banning files inside zips is only
available in EVA Pro.
Darin.
- Original Message -
From: Schmeits, Roger
To: Declude.Virus@declude.com
Sent: Thursday,
On that note, I would also like to reraise the need for documentation on
reported/known issues with a particular release. A simple page with a quick
note about each reported issue would be very beneficial.
Also, I would think each release would be reported on the Declude Releases
list like Scott
Totally agree... there are not enough announcements of bugs and
fixes/releases especially when there's an unused list for that purpose.
Darin.
- Original Message -
From: Andy Schmidt [EMAIL PROTECTED]
To: Declude.Virus@declude.com
Sent: Saturday, October 22, 2005 4:52 PM
Subject:
...
but it's a long long standing issue.
- Original Message -
From: Darin Cox [EMAIL PROTECTED]
To: Declude.Virus@declude.com
Sent: Saturday, October 22, 2005 7:36 AM
Subject: Re: [Declude.Virus] 3.0.5.10
On that note, I would also like to reraise the need for documentation on
reported/known
Just ran across a possible problem with the
BANnotify.EML in Declude Virus 1.82. If a SKIPIFFORGING line is in it, it
doesn't send the notification.
Is this an inappropriate setting? i.e. If virus checking is done
first then SKIPIFFORGING would not apply.Darin.
If you have Declude Virus/EVA Pro you can switch to banning extensions
within zips. With Standard, you may want to continue to ban encrypted zips.
In either case, you will probably want to send out notices for banned files,
notifying the intended recipient that a file sent to them was blocked.
Another possible variant overnight at 4:30AM
ET. Same routing as the new Sober variant from yesterday, but different
attachment: screen_photo.zip
Darin.
- Original Message -
From: Darin Cox
To: Declude.Virus@declude.com
Sent: Wednesday, October 05, 2005 10:33 PM
Subject
We're seeing a lot of emails with pword_change.zip
attached. May want to block it in your virus.cfg.
Subject is"Your new Password" All so
far were routed through gmx.net or web.de just before delivery, but are
originating from a variety of dial-up or broadband ISP
accounts.
Darin.
-
From:
Darin Cox
To: Declude.Virus@declude.com
Sent: Wednesday, October 05, 2005 10:33
PM
Subject: [Declude.Virus] Possible new
virus
We're seeing a lot of emails with
pword_change.zip attached. May want to block it in your
virus.cfg.
Subject is"You
Are they viruses, or are they vulnerabilities and banned files?
Best method is to set up notifications to the intended recipient for banned
files with a link for them to requeue the message if it was legit, and have
a scheduled script to clear out files older than X days.
This has been discussed
I see 3.0.5 was released today. Anyone know
if this fixes the reported performance and stability issues reported here with
the 3.0.x betas?
Darin.
With Declude 1.82, we haven't had any trouble with decoding and blocking
viruses or banned attachments in attached .eml or .msg files. We wouldn't
block them separately because of all of forwarded messages sent as
attachments, both by us, AOL feedback loops, and by our users.
Darin.
-
]
[mailto:[EMAIL PROTECTED]
On Behalf Of Darin Cox
Sent: Wednesday, September 14, 2005 11:01 AM
To: Declude.Virus@declude.com
Subject: Re: [Declude.Virus] blocking eml and msg attachemtns
With Declude 1.82, we haven't had any trouble with decoding and blocking
viruses or banned attachments
o, renames the request to
1.msg as an attachment to the response.
John T
eServices For You
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]
On Behalf Of Darin Cox
Sent: Wednesday, September 14, 2005 11:01 AM
To: Declude.Virus@declude.com
Subject: Re: [Dec
I thought it was rebooted every night around 3 am ET...
Darin.
- Original Message -
From: Scott Fisher [EMAIL PROTECTED]
To: Declude.Virus@declude.com
Sent: Friday, September 09, 2005 12:01 PM
Subject: Re: [Declude.Virus] Sudden Internet Slowdown
You can't do an internet reboot on a
,
No - that must be your servers only, check if you have your scheduler to do
a reboot at 3am every night you may be pleasantly surprised :)
David B
www.declude.com
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Darin Cox
Sent: Friday, September 09, 2005 1
]
[mailto:[EMAIL PROTECTED]
On Behalf Of Darin Cox
Sent: Friday, September 09, 2005 10:33 AM
To: Declude.Virus@declude.com
Subject: Re: [Declude.Virus] Sudden Internet Slowdown
I thought it was rebooted every night around 3 am ET...
Darin.
- Original Message -
From: Scott Fisher
Oh, right.. *nix is set to reboot at
4am.
Darin.
- Original Message -
From: Matt
To: Declude.Virus@declude.com
Sent: Friday, September 09, 2005 1:45 PM
Subject: Re: [Declude.Virus] Sudden Internet Slowdown
That's just the Windows version
:)MattDarin Cox wrote:
I thought it was
-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]
On Behalf Of Darin Cox
Sent: Friday, September 09, 2005 10:55 AM
To: Declude.Virus@declude.com
Subject: Re: [Declude.Virus] Sudden Internet Slowdown
You mean 4AM ET... We do have some sickos over here that get up to go to
work
8)
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Darin Cox
Sent: Friday, September 09, 2005 10:55 AM
To: Declude.Virus@declude.com
Subject: Re: [Declude.Virus] Sudden Internet Slowdown
You mean 4AM ET... We do have some sickos over here that get
the work
yesterday that they asked us to do tomorrow.
John T
eServices For You
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]
On Behalf Of Darin Cox
Sent: Friday, September 09, 2005 11:39 AM
To: Declude.Virus@declude.com
Subject: Re: [Declude.Virus] Sudden Internet
Yep... I find that typically only a few questions or comments on the list
get formal response by Declude nowadays, so email to their support address
is the only way to get a response. There's just not the same level of
service or customer attention.
Darin.
- Original Message -
From:
the conversations I had with Scott in the past that was the case but
I just wanted to make sure before I upgraded to 2.0.6.
TIA,
Dan
- Original Message -
From: Darin Cox [EMAIL PROTECTED]
To: Declude.Virus@declude.com
Sent: Wednesday, June 29, 2005 10:02 AM
Subject: Re: [Declude.Virus] Ignoring
Don't know what it is yet, but the attached file
was named kitten.zipcontainingan
unencryptedEXE.
Darin.
Similar pattern to Markus' here, except that ours
fell off to nothing slipping through from mid-March to mid-May. Previous
pattern of receivingtwo or three a week resumed mid-May, but has gotten
better over the past couple of weeks thanks to Sniffer.
Darin.
- Original Message -
:[EMAIL PROTECTED] Auftrag von Darin Cox
Gesendet: Sonntag, 5. Juni 2005 23:02
An: Declude.Virus@declude.com
Betreff: Re: [Declude.Virus] Newbie question
I don't know if it still exists since it is not in the current manual, but
there was an option in previous versions of AV called AVAFTERJM
HOLD
Do I need to do anything else to the junkmail file to reference
MYFILTER or does the WEIGHT20 take care of everything?
Thanks.
Kevin
Darin Cox wrote:
Nope... add a filter test and put those lines in it. The same
thing I
mentioned without pro applies here for adding test names
PROTECTED]
To: Declude.Virus@declude.com
Sent: Sunday, June 05, 2005 3:17 PM
Subject: Re: [Declude.Virus] Newbie question
Thanks for the quick response. Yes, I have the Pro versions for both AV
and Junkmail.
Darin Cox wrote:
Do you have the Pro version of Declude Junkmail? You have to have pro
Hi Bill,
First, welcome. I hope yours will be a
constant voice on the list.
Questions:
1. What version of Declude? 2.06 only,
or other versions as well?
2. How about older versions of IMail (8.1x,
8.0x, 7, 6, etc.)
Thanks.
Darin.
- Original Message -
From: Bill Billman
To:
Thanks, Bill.
Darin.
- Original Message -
From: Bill Billman
To: Declude.Virus@declude.com
Sent: Friday, June 03, 2005 5:05 PM
Subject: RE: [Declude.Virus] System resources
Thanks
Darin.
The problem seems to be
with IMail 8.2 and any version of Declude. We havent seen this
You don't have to have PRO. You can also use a FROMFILE test with a text
file listing all of the email addresses and/or domains you want to penalize.
Just put a line like this in your Global.CFG:
FROMBLACKLIST fromfile C:\IMail\Declude\fromblacklist.txt x 200
0
This penalizes every
Nope... add a filter test and put those lines in it. The same thing I
mentioned without pro applies here for adding test names to the global.cfg
and $default$.junkmail.
The manual at http://declude.com/junkmail/manual.htm decribes adding filter
files pretty well.
Darin.
- Original Message
to do anything else to the junkmail file to reference MYFILTER
or does the WEIGHT20 take care of everything?
Thanks.
Kevin
Darin Cox wrote:
Nope... add a filter test and put those lines in it. The same thing I
mentioned without pro applies here for adding test names to the global.cfg
and $default
. In the
case of a virus, I don't know if the envelope from would have the forged
address in it.
You'd have to capture some of the messages to know for sure.
- Original Message -
From: Darin Cox [EMAIL PROTECTED]
To: Declude.Virus@declude.com
Sent: Thursday, June 02, 2005 5:48 PM
Subject: Re
Title: Message
Hi Goran,
Oh, I thought you wanted to separate the ALLRECIPS
into TO, CC, and BCC groups.
Does CC work? I would think that it would,
but haven't tried it.
In any case, you might be able to insert
ascript in the process chain for virus scanning to check the result code
and
Title: Message
Do you use scripts to set up your accounts?
Saves us a ton of time when restoring or migrating accounts.
When we had a similar problem mid-April that also
required a server rebuild, running the scripts allowed us to recreate all of the
websites on that server in a few
Title: Message
I asked about this about a month ago. From
what I was told, Declude cannot determine who is on the CC or BCC list due to
where they look for that info.
Darin.
- Original Message -
From: Goran
Jovanovic
To: Declude.Virus@declude.com
Sent: Tuesday, May 31, 2005 9:27
Oh man...I feel your pain! Happened
tous mid-April. Fortunately it was just after midnight on a Friday,
so we had everything back up before morning and no one noticed the interruption
in service.
Was it Windows mirroring or hardware
level?
Darin.
- Original Message -
From: John
I would hope existing vulnerability checks would
not be retired, since there are already flags to decide whether or not to check
for particular ones. We catch a bit of spam in the virus queue with these
checks that is not otherwise caught, especially some that someone else (Andrew?)
Matt,
Point taken that it may no longer be a
vulnerability. So, call it something different, maybe just another type of
spam test, but don't take it away. They still have value as tests.
As I stated earlier, we see spam held bythe vulnerability teststhat
were not detected byspamtests.
If
Hi Matt,
I think most of us always consider the "greater
good" before making requests... and by their nature, most requests from one
person have benefit to many others.
I think the recommendation you outlined below is
fairly good...but again, I would not like to see potentially valuable
Sounds good to me. I tend to think of both
virus and spam detection in the same breath, since I think they're stronger
together than separate... but you certainly have a valid point about moving code
to Junkmail...and it would seem more useful there as well.
I haven't seen the false
Huh? What about FTP is not working?
We're still FTPing from them. Latest defs are Monday at 10:34am. I just
ran the FTP update script manually and it ran fine.
Here's what we use
open ftp.frisk.is
user
anonymous
[EMAIL PROTECTED]
cd pub
binary
hash
prompt
get fp-def.zip
get macrdef2.zip
FAQ:
http://www.f-prot.com/support/windows/fpwin_faq/fpwin_faq_6.html
which lists:
http://www.f-prot.com/support/windows/fpwin_faq/30.html
Andrew 8)
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Darin Cox
Sent: Wednesday, May 04, 2005 9:43 AM
ROTECTED]] On Behalf Of Darin Cox
Sent: Wednesday, May 04, 2005 9:43 AM
To: Declude.Virus@declude.com
Subject: Re: [Declude.Virus] f-prot update script
Huh? What about FTP is not working?
We're still FTPing from them. Latest defs are Monday at 10:34am. I
just ran the FTP update script manually and
We just saw a rash of them as well. Same patterns you mentioned. Glad
we're holding on RAR!
Darin.
- Original Message -
From: John Carter [EMAIL PROTECTED]
To: Declude.Virus@declude.com
Sent: Thursday, April 14, 2005 5:29 PM
Subject: [Declude.Virus] RAR followup
Starting to see
There could be many RBL's in your config (we have about 100 in ours...which
we probably need to prune since many don't add any real value), each of
which would require a DNS hit for each message.
Best just to set up your own DNS server and be done with it.
Darin.
- Original Message -
201 934-9206
http://www.HM-Software.com/
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Darin Cox
Sent: Friday, January 28, 2005 05:15 PM
To: Declude.Virus@declude.com
Subject: Re: [Declude.Virus] RAR Support - why not?
Notices only go out for banned
Sure For about two weeks until I get back from vacationuh, we still
get to charge for internet related services, right? ;^P
Darin.
- Original Message -
From: Greg Little [EMAIL PROTECTED]
To: Declude.Virus@declude.com
Sent: Wednesday, December 29, 2004 12:59 PM
Subject: Re:
http://www.thechannelinsider.com/article2/0,1759,1745654,00.asp
Darin.
- Original Message -
From: John Tolmachoff (Lists) [EMAIL PROTECTED]
To: Declude.Virus@declude.com
Sent: Tuesday, December 28, 2004 1:50 PM
Subject: [Declude.Virus] hlp attachments
I just had a client request
It's one thing to have the facts and make the decision yourself...it's
another to have blind faith in another. I think most people will need to
know exactly how the new licensing works to be comfortable with it.
To avoid a lot of calls, and having to explain everything over and over, it
would
questions customers will have - rather
than to be scrambling after the fact to assuage any concerns that are
raised.
Darin.
- Original Message -
From: Darin Cox [EMAIL PROTECTED]
To: Declude.Virus@declude.com
Sent: Thursday, December 23, 2004 6:11 AM
Subject: Re: [Declude.Virus
I would need a better understanding of exactly what that means before I
would be comfortable with it.
Darin.
- Original Message -
From: R. Scott Perry [EMAIL PROTECTED]
To: Declude.Virus@declude.com
Sent: Tuesday, December 21, 2004 7:16 PM
Subject: RE: [Declude.Virus] Upgrade issues
How do we disable all notifications except for
banned attachment?
I've changed the names of all of the templates
except BANnotify.eml, but am still getting some postmaster notifications for
virus detections.
Thanks,
Darin.
Hi Markus,
Sounds like you're experiencing what we saw starting on November 16th... a
tenfold increase in spam overnight.
After a little over a week ours settled down ton about 3 times the amount of
spam prior to the 16th. That has been steady ever since.
We've attributed it to the recent
Thanks, Scott,
As Rick suggested, I moved all of the other notifications to a separate
folder.
Darin.
- Original Message -
From: R. Scott Perry [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Thursday, December 16, 2004 3:12 PM
Subject: Re: [Declude.Virus] Disable all virus
can't see any step near to 2004-11-16 but the virus creating this big
wall of infected messages is Zafi.D, appeared some days ago.
Markus
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Darin Cox
Sent: Thursday, December 16, 2004 4:46 PM
To: [EMAIL
had to move them to a sub directory or delete
them to get them to stop, renaming didnt work
Rick DavidsonNational Systems ManagerNorth American Title
Group-
- Original Message -
From:
Darin Cox
To: [EMAIL PROTECTED]
Sent: Thursday, December 16, 2004 10:37
AM
Subject
1 - 100 of 165 matches
Mail list logo
