I'm still on Declude v2.x and am comfortable there, as Don
points out, many of us are waiting for the v3.x to be utterly
stable and to have desired new features before going to it.
As the software is maturing, so is much of the userbase;
there used to be a lot of early adopters when
We are also running the latest release of v 3. We only have one open
question to Declude Tech support as to why Base64 does not trigger
sometimes. No crashes or other problems with either AV or JM.
It is a lot faster.
Thanks,
Sunday, January 29, 2006, 4:06:28 AM, Markus Gufler [EMAIL
ng agains the SPAM message (i.e. routeto, subject, etc.).
Is this not true?
KeithÂ
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]
On Behalf Of Markus Gufler
Sent: Friday, January 27, 2006 12:03 PM
To: Declude.Virus@declude.com
Subject: RE: [Declude
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of
MattSent: Sunday, January 29, 2006 7:53 PMTo:
Declude.Virus@declude.comSubject: Re: [Declude.Virus] Feature
request: DELETEVIRUSNAME
A quick update on this.I verified that when the virus
scanner triggers using AVAFTERJM
Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Don Brown
Sent: Saturday, January 28, 2006 5:32 AM
To: Declude.Virus@declude.com
Subject: Re: [Declude.Virus] Feature request: DELETEVIRUSNAME
A single piece of software can't possibly be all things to all people.
I
Subject: RE: [Declude.Virus] Feature request: DELETEVIRUSNAME
Ok you're right exactly as you was when HOP was introduced.
Such a little feature request was not worth neither the half
of all messages in this topic. Additionaly the entire Declude
staff seems to be in holidays.
So I have
Instead of doing something like that, which will require on-going,
hands-on maint, why not just tag to hold those which are identified by
the scanner as suspicious or generic and delete the rest?
Wednesday, January 25, 2006, 4:37:28 PM, Markus Gufler [EMAIL PROTECTED]
wrote:
MG Maybe someone
Thursday, January 26, 2006, 2:33:11 AM, Colbeck, Andrew [EMAIL PROTECTED]
wrote:
CA[SNIP]
CA Like you, I have a system that blocks a ton of mail, so I run AVAFTERJM
CA to cut down on the work, and this definitely leaves a gap in my
CA statistics. Similarly, it follows that I wouldn't want to
How does AVAFTERJM cut down on work? I thought it only
affected the order in which JM and AV ran, and that AV ran
each time, regardless of this setting.
The problem I know is when someone is reviewing hold spam messages and has
the possibility to requeue them. In this case the message
Instead of doing something like that, which will require
on-going, hands-on maint, why not just tag to hold those
which are identified by the scanner as suspicious or generic
and delete the rest?
This is another possible solution but my intention is to clean my server
from messages
How does AVAFTERJM cut down on work? I thought it only affected the
order in which JM and AV ran, and that AV ran each time, regardless of
this setting.
The main benefit is that it cuts down on the amount of messages virus
scanned thus saving resources. It has been a MAJOR help for me.
.
- Original Message -
From: Don Brown [EMAIL PROTECTED]
To: Declude.Virus@declude.com
Sent: Friday, January 27, 2006 9:45 AM
Subject: Re: [Declude.Virus] Feature request: DELETEVIRUSNAME
Thursday, January 26, 2006, 2:33:11 AM, Colbeck, Andrew
[EMAIL PROTECTED] wrote:
CA[SNIP]
CA Like you, I
10:02 AM
To: Declude.Virus@declude.com
Subject: Re: [Declude.Virus] Feature request: DELETEVIRUSNAME
How does AVAFTERJM cut down on work? I thought it only affected the
order in which JM and AV ran, and that AV ran each time, regardless of
this setting.
The main benefit is that it cuts down
:[EMAIL PROTECTED] On Behalf Of Darrell
([EMAIL PROTECTED])
Sent: Friday, January 27, 2006 10:02 AM
To: Declude.Virus@declude.com
Subject: Re: [Declude.Virus] Feature request: DELETEVIRUSNAME
How does AVAFTERJM cut down on work? I thought it only affected the
order in which JM and AV ran
PROTECTED])
Sent: Friday, January 27, 2006 10:43 AM
To: Declude.Virus@declude.com
Subject: Re: [Declude.Virus] Feature request: DELETEVIRUSNAME
Keith,
It still gets virus scanned. I have tons of viruses in my virus drop
point
for ROUTETO accounts.
Darrell
As a practical matter, about what percent fall into the category of
the Virus Scanner making a false positive? IOW, aren't you out hunting
mosquitos with hand grenades?
Friday, January 27, 2006, 8:58:25 AM, Markus Gufler [EMAIL PROTECTED] wrote:
Instead of doing something like that, which will
])
Sent: Friday, January 27, 2006 10:02 AM
To: Declude.Virus@declude.com
Subject: Re: [Declude.Virus] Feature request: DELETEVIRUSNAME
How does AVAFTERJM cut down on work? I thought it only affected the
order in which JM and AV ran, and that AV ran each time, regardless of
this setting
aren't you out hunting mosquitos with hand grenades?
If the mosquito is a very nasty but important customer it's bether using
tank's, mg's and whatever you can organize in order to prevent painfull
stings...
On a day liky today I could turn on DELETEVIRUSES with nearly zero risk in
order to
: Friday, January 27, 2006 10:02 AM To: Declude.Virus@declude.com Subject: Re: [Declude.Virus] Feature request: DELETEVIRUSNAME
How does AVAFTERJM cut down on work?I thought it only affected the order in which JM and AV ran, and that AV ran each time, regardless of this setting.
The main benefit
So, with or without AVAFTERJM, it looks like each message is
scanned by the virus scanner (which makes sense to me).
Wrong... if you block the messages on the servers:
As we know usualy 50% of all incomming messages are spam.
We know too that resource usage of one or two scan-engines is way
, January 27, 2006 12:03 PM
To: Declude.Virus@declude.com
Subject: RE: [Declude.Virus] Feature request: DELETEVIRUSNAME
So, with or without AVAFTERJM, it looks like each message is scanned
by the virus scanner (which makes sense to me).
Wrong... if you block the messages on the servers:
As we know
, subject, etc.).
Is this not true?
Keith
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of Markus Gufler
Sent: Friday, January 27, 2006 12:03 PM
To: Declude.Virus@declude.com
Subject: RE: [Declude.Virus] Feature request: DELETEVIRUSNAME
So
eith
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of Darrell
([EMAIL PROTECTED])
Sent: Friday, January 27, 2006 10:02 AM
To: Declude.Virus@declude.com
Subject: Re: [Declude.Virus] Feature request: DELETEVIRUSNAME
How does AVAFTE
: [Declude.Virus] Feature request: DELETEVIRUSNAME
Maybe someone has already requested it:
Why not allow commands like
DELETEVIRUSNAME Netsky
DELETEVIRUSNAME Bagle
...
in the virus.cfg file?
I won't and can't delete all viruses on our server because
there is always the possibility
DNS. Please correct me if I'm wrong on any of
this.
Andrew 8)
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of Markus Gufler
Sent: Wednesday, January 25, 2006 2:37 PM
To: Declude.Virus@declude.com
Subject: [Declude.Virus] Feature request
: [Declude.Virus] Feature request: DELETEVIRUSNAME
Maybe someone has already requested it:
Why not allow commands like
DELETEVIRUSNAME Netsky
DELETEVIRUSNAME Bagle
...
in the virus.cfg file?
I won't and can't delete all viruses on our server because
there is always the possibility that a scanner
:[EMAIL PROTECTED] On Behalf Of
MattSent: Friday, January 27, 2006 10:09 AMTo:
Declude.Virus@declude.comSubject: Re: [Declude.Virus] Feature
request: DELETEVIRUSNAME automagic
I thought that AV false positives can occur with definitions for
known virus names. In other words, if a message gets
-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Darrell
([EMAIL PROTECTED])
Sent: Friday, January 27, 2006 10:02 AM
To: Declude.Virus@declude.com
Subject: Re: [Declude.Virus] Feature request: DELETEVIRUSNAME
How does AVAFTERJM cut down on work? I thought it only affected
Seems there is some confusion about whether or not AVAFTERJM prevents
AV from running. Some say it does and some say it doesn't matter - AV
still runs on all messages.
So, I guess we first need to have someone from Declude tell us, FOR
SURE, which it is. There isn't much in either section 9.1 or
To: Declude.Virus@declude.com
Subject: Re: [Declude.Virus] Feature request: DELETEVIRUSNAME
How does AVAFTERJM cut down on work? I thought it only affected the
order in which JM and AV ran, and that AV ran each time, regardless of
this setting.
The main benefit is that it cuts down on the amount
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Markus Gufler
Sent: Friday, January 27, 2006 12:03 PM
To: Declude.Virus@declude.com
Subject: RE: [Declude.Virus] Feature request: DELETEVIRUSNAME
So, with or without AVAFTERJM, it looks like each message
in the
same configuration.
--DH
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Darrell
([EMAIL PROTECTED])
Sent: Friday, January 27, 2006 1:54 PM
To: Declude.Virus@declude.com
Subject: Re: [Declude.Virus] Feature request: DELETEVIRUSNAME
HOLD, DELETE, ETC - Does
There is no perfect Spam or Virus system. There will either be false
positives, missed Spam or Viruses or a combination of both.
Therefore, if the customer is expecting absolute perfection, then I
think the problem is one of a customer with unrealistic expectations.
You said, what happens if
To: Declude.Virus@declude.com
Subject: Re: [Declude.Virus] Feature request: DELETEVIRUSNAME
HOLD, DELETE, ETC - Does not get virus scanned with AVAFTERJM
ROUTETO, SUBJECT, Etc - Does get virus scanned.
Think of it this way anything that ends up being delivered
somewhere (i.e.
mailbox etc) gets
.).
Is this not true?
KeithÂ
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of Markus Gufler
Sent: Friday, January 27, 2006 12:03 PM
To: Declude.Virus@declude.com
Subject: RE: [Declude.Virus] Feature request: DELETEVIRUSNAME
]] On Behalf Of Darrell
([EMAIL PROTECTED])
Sent: Friday, January 27, 2006 1:54 PM
To: Declude.Virus@declude.com
Subject: Re: [Declude.Virus] Feature request: DELETEVIRUSNAME
HOLD, DELETE, ETC - Does not get virus scanned with AVAFTERJM ROUTETO,
SUBJECT, Etc - Does get virus scanned.
Think
not be used in the
same configuration.
--DH
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of Darrell
([EMAIL PROTECTED])
Sent: Friday, January 27, 2006 1:54 PM
To: Declude.Virus@declude.com
Subject: Re: [Declude.Virus] Feature request: DELETEVIRUSNAME
HOLD
-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Darrell
([EMAIL PROTECTED])
Sent: Friday, January 27, 2006 10:02 AM
To: Declude.Virus@declude.com
Subject: Re: [Declude.Virus] Feature request: DELETEVIRUSNAME
How does AVAFTERJM cut down on work? I thought it only
Friday, January 27, 2006, 1:12:04 PM, Dan Horne [EMAIL PROTECTED] wrote:
DH [SNIP]
DH IMO, AVAFTERJM should be changed so that only deleted emails, not held
DH ones, by pass the AV scan. In other words, all messages should be
DH first scanned for spam, then the ones that are not DELETED
COPYFILE does not add any Declude
headers.
- Original Message -
From:
Matt
To: Declude.Virus@declude.com
Sent: Friday, January 27, 2006 1:28
PM
Subject: Re: [Declude.Virus] Feature
request: DELETEVIRUSNAME
Dan,You might try COPYFILE which is essentially HOLD
Dan, this is all implementation
dependent. Your observed behaviour is not universal to Declude
deployments.Specifically, re-queued messages on
IMail systems do indeed get scanned by Declude JunkMail and EVA when the
Q*.SMD is moved to the overflow folder (as opposed to being moved to the
Thanks, Matt that'll be helpful.
- Original Message -
From:
Matt
To: Declude.Virus@declude.com
Sent: Friday, January 27, 2006 2:32
PM
Subject: Re: [Declude.Virus] Feature
request: DELETEVIRUSNAME
Sorry. If you add the following directive to your
Global.cfg
: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Don Brown
Sent: Friday, January 27, 2006 8:24 PM
To: Declude.Virus@declude.com
Subject: Re: [Declude.Virus] Feature request: DELETEVIRUSNAME
There is no perfect Spam or Virus system. There will either
be false positives, missed Spam
]
[mailto:[EMAIL PROTECTED] On Behalf Of Don Brown
Sent: Friday, January 27, 2006 8:24 PM
To: Declude.Virus@declude.com
Subject: Re: [Declude.Virus] Feature request: DELETEVIRUSNAME
There is no perfect Spam or Virus system. There will either
be false positives, missed Spam or Viruses
To: Declude.Virus@declude.com
Subject: RE: [Declude.Virus] Feature request: DELETEVIRUSNAME
As a work around until and if Declude adds the requested
feature, you
could write a script to search the files on a timed based
for a phrase
(virus
name) and have it delete them.
Do you
, 2006 3:33 AM
Subject: RE: [Declude.Virus] Feature request: DELETEVIRUSNAME
Do you mean this script on my disk who creates one hour each
day with 100% CPU usage?
Markus, I found that a pretty fun bit of sarcasm. But I have a dry
sense of humour.
It sounds like you're not using AVAFTERJM so
To: Declude.Virus@declude.com
Subject: [Declude.Virus] Feature request: DELETEVIRUSNAME
Maybe someone has already requested it:
Why not allow commands like
DELETEVIRUSNAME Netsky
DELETEVIRUSNAME Bagle
...
in the virus.cfg file?
I won't and can't delete all viruses on our server because
Excellent idea!
- Original Message -
From: Markus Gufler [EMAIL PROTECTED]
To: Declude.Virus@declude.com
Sent: Wednesday, January 25, 2006 4:37 PM
Subject: [Declude.Virus] Feature request: DELETEVIRUSNAME
Maybe someone has already requested it:
Why not allow commands like
But if we are cycling the held viruses on a x day basis, (my
cycle is 5
days,) why would that be needed?
5 days x 2 viruses x 2 (d q-file) = 200k files
Around 99% of this files contains the same 5 types of malware that are
stored, moved and defragmented unnecessary.
I asked only
Of Markus Gufler
Sent: Wednesday, January 25, 2006 3:27 PM
To: Declude.Virus@declude.com
Subject: RE: [Declude.Virus] Feature request: DELETEVIRUSNAME
But if we are cycling the held viruses on a x day basis, (my
cycle is 5
days,) why would that be needed?
5 days x 2 viruses x 2 (d
As a work around until and if Declude adds the requested
feature, you could write a script to search the files on a
timed based for a phrase (virus
name) and have it delete them.
Do you mean this script on my disk who creates one hour each day with 100%
CPU usage?
Markus
---
[This
51 matches
Mail list logo
