RE: [Declude.Virus] exe in zip file why not blocked...

2007-07-30 Thread David Barker
: declude.virus@declude.com Subject: RE: [Declude.Virus] exe in zip file why not blocked... Declude 4.3.57 AVAFTERJM ON YES. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Barker Sent: Monday, July 30, 2007 7:48 AM To

RE: [Declude.Virus] exe in zip file why not blocked...

2007-07-30 Thread David Barker
Scott, What version of Declude ? Are you using the directive AVAFTERJM ON? David From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Scott Fisher Sent: Friday, July 27, 2007 3:06 PM To: declude.virus@declude.com Subject: [Declude.Virus] exe in zip file why not blocked...

RE: [Declude.Virus] removing js/psyme

2007-07-24 Thread David Barker
Looks like the list added a footer to the attached filter. Be sure to remove the additional text. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Barker Sent: Tuesday, July 24, 2007 12:36 PM To: declude.virus@declude.com Subject: RE: [Declude.Virus

RE: [Declude.Virus] removing js/psyme

2007-07-24 Thread David Barker
Just FYI the emails themselves do not contain a virus. Use the attached filter to detect these emails, using Declude JunkMail. You must be using at least Declude 4.3.46 to take use the regular expression filtering. David Barker VP Operations | Declude Your Email Security is our business O

[Declude.Virus] Interim 4.3.57 available

2007-07-17 Thread David Barker
ixed BANEXT EZIP for encrypted files, .RAR can encrypt file names only using a password. 4.3.47 JM Fixed HELO information was reported incorrectly when IPBYPASS is set David Barker VP Operations | Declude Your Email Security is our business O: 978.499.2933 x7007 F: 978.988.1311 E: [EMAIL PROT

[Declude.JunkMail] Interim 4.3.57 available

2007-07-17 Thread David Barker
ixed BANEXT EZIP for encrypted files, .RAR can encrypt file names only using a password. 4.3.47 JM Fixed HELO information was reported incorrectly when IPBYPASS is set David Barker VP Operations | Declude Your Email Security is our business O: 978.499.2933 x7007 F: 978.988.1311 E: [EMAIL PROT

RE: [Declude.Virus] AVG Antivirus AVG7CORE.SYS IOCTL Handler Privilege Escalation

2007-07-12 Thread David Barker
Mark, As we use the AVG SDK which integrates with Declude we do not use the AVG7CORE.SYS device driver. So this should not be an issue. David From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mark Reimer Sent: Thursday, July 12, 2007 10:11 AM To: declude.virus@declude.com S

RE: !!!PRE RE: [Declude.Virus] Problem with postmaster.eml and imail 2006.2

2007-06-22 Thread David Barker
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Barker Sent: Thursday, June 21, 2007 5:23 PM To: declude.virus@declude.com Subject: !!!PRE RE: [Declude.Virus] Problem with postmaster.eml and imail 2006.2 And it is going to [EMAIL PROTECTED] instead of [EMAIL PROTECTED] ? %LOCALHO

RE: [Declude.Virus] Problem with postmaster.eml and imail 2006.2

2007-06-21 Thread David Barker
PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Barker Sent: Thursday, June 21, 2007 4:34 PM To: declude.virus@declude.com Subject: RE: [Declude.Virus] Problem with postmaster.eml and imail 2006.2 Can you post a copy of the header of one of the messages ? From: [EMAIL PROTECTED] [

RE: [Declude.Virus] Problem with postmaster.eml and imail 2006.2

2007-06-21 Thread David Barker
w, use, disclosure or distribution is prohibited. If you are not the intended recipient, please contact [EMAIL PROTECTED] by email and destroy all copies of the original message. _ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Barker Sent: Thursday, June 21, 2007 12:50

RE: [Declude.Virus] Problem with postmaster.eml and imail 2006.2

2007-06-21 Thread David Barker
Does your postmaster.eml contain the following line ? To: [EMAIL PROTECTED] David Barker Director of Product Management Your Email security is our business 978.499.2933 office 978.988.1311 fax [EMAIL PROTECTED] From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Howard

RE: [Declude.Virus] False Positive ClamAV

2007-05-21 Thread David Barker
With Declude 4.x AVG is a built in commercial grade AV scanner I would suggest disabling Clam and using the built in scanner until Clam has resolved this. David Barker VP Operations | Declude Your Email Security is our business O: 978.499.2933 x7007 F: 978.988.1311 E: [EMAIL PROTECTED] -

RE: [Declude.Virus] More info about encrypted RAR virus and Declude failures

2007-05-07 Thread David Barker
able to download this newly fixed version? Gary Steiner Original Message > From: "David Barker" <[EMAIL PROTECTED]> > Sent: Wednesday, May 02, 2007 4:19 PM > To: declude.virus@declude.com > Subject: RE: [Declude.Virus] More info about encrypted RA

RE: [Declude.Virus] Viruses in Spam folder

2007-05-04 Thread David Barker
In your virus.cfg file #Change the order in which JunkMail and Declude EVA scan. The default is JunkMail followed by Declude EVA. AVAFTERJM OFF David Barker VP Operations | Declude Your Email Security is our business O: 978.499.2933 x7007 F: 978.988.1311 E: [EMAIL PROTECTED

RE: [Declude.Virus] More info about encrypted RAR virus and Declude failures

2007-05-02 Thread David Barker
tomers are sending. Gary Original Message > From: "David Barker" <[EMAIL PROTECTED]> > Sent: Friday, April 27, 2007 5:52 PM > To: declude.virus@declude.com > Subject: RE: [Declude.Virus] More info about encrypted RAR virus and > Declude failures >

RE: [Declude.Virus] re: new virus with .rar attachment

2007-05-02 Thread David Barker
s] re: new virus with .rar attachment So, how's the investigation going? Original Message > From: "David Barker" <[EMAIL PROTECTED]> > Sent: Wednesday, April 25, 2007 6:43 PM > To: declude.virus@declude.com > Subject: RE: [Declude.Virus] re: new vi

RE: [Declude.Virus] More info about encrypted RAR virus and Declude failures

2007-04-27 Thread David Barker
You may be able to do something with the MSGSIZE test in conjunction with AVAFTERJM ON eg. SIZE-10MB msgsize 10240 x -50 0 David Barker VP Operations | Declude Your Email Security is our business O: 978.499.2933 x7007 F: 978.988.1311 E: [EMAIL

RE: [Declude.Virus] re: new virus with .rar attachment

2007-04-25 Thread David Barker
Not sure if it is a bug just yet, I have submitted it for investigation. David Barker VP Operations | Declude Your Email Security is our business O: 978.499.2933 x7007 F: 978.988.1311 E: [EMAIL PROTECTED] -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On

RE: [Declude.Virus] Please update your address book with my new email address of [EMAIL PROTECTED] This ad

2007-04-18 Thread David Barker
FYI Taking him off the list now because of the auto-responder -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Grant Griffith Sent: Wednesday, April 18, 2007 4:14 PM To: declude.virus@declude.com Subject: [Declude.Virus] Please update your address book wit

RE: [Declude.Virus] Temp files ClamAV Windows not deleting

2007-04-18 Thread David Barker
uld like to use Clam as a secondary scanner if possible? Any thoughts? Thanks Jared From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Barker Sent: Tuesday, April 17, 2007 1:58 PM To: declude.virus@declude.com Subject: RE: [Declude.Virus] Temp files ClamAV Windows not dele

RE: [Declude.Virus] Temp files ClamAV Windows not deleting

2007-04-17 Thread David Barker
You need to take ownership of the files as the administrator and then you can delete them. _ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kami Razvan Sent: Tuesday, April 17, 2007 2:41 PM To: declude.virus@declude.com Subject: [Declude.Virus] Temp files ClamAV Windows no

RE: [Declude.Virus] Declude 4.3.46 Release

2007-04-16 Thread David Barker
deal, but it is definitely better to lose regex than it is to lose Declude as these systems have to have high availability and should be designed that way. Thanks, Matt David Barker wrote: The file was pcre3.dll and this would have only effected upgrades prior to 4.3.40 of Imail, howeve

RE: [Declude.Virus] Declude 4.3.46 Release

2007-04-16 Thread David Barker
The file was pcre3.dll and this would have only effected upgrades prior to 4.3.40 of Imail, however the downloads now include pcre3.dll for all versions prior. David Barker VP Operations | Declude Your Email Security is our business O: 978.499.2933 x7007 F: 978.988.1311 E: [EMAIL

[Declude.Virus] Declude 4.3.46 Release

2007-04-16 Thread David Barker
ADD Updated Commtouch ZEROHOUR (asapsdk.dll 5.03.0013) JM FIX Smartermail HELO was being picked up from the headers rather than the envelope JM FIX Fixed log entry for PCRE when matching on location SUBJECT David Barker VP Operations | Declude Your Email Security is

RE: [Declude.Virus] AVG Virus updates - No updates from declude since 4/7/7

2007-04-16 Thread David Barker
s the file dates are concerned. Not every file needs to have the latest date as the updates and new virus signatures are incremental. As long as you have a file dated 14/15 Apr 2007 you are ok, but will need to upgrade when we do the release. David Barker VP Operations | Declude Your Email Securi

RE: [Declude.Virus] AVG Virus updates - No updates from declude since 4/7/7

2007-04-16 Thread David Barker
I will respond to this in a few minutes. David Barker Director of Product Management Your Email security is our business 978.499.2933 office 978.988.1311 fax [EMAIL PROTECTED] From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darrell ([EMAIL

RE: Warning Rescinded: RE: [Declude.Virus] WARNING -RE: [Declude.JunkMail]

2007-03-12 Thread David Barker
All set, made minor change to the installer if you downloaded prior to Rob's email download again. David Barker Director of Product Management Your Email security is our business 978.499.2933 office 978.988.1311 fax [EMAIL PROTECTED] -Original Message- From: [EMAIL PROTECTED] [m

RE: Warning Rescinded: RE: [Declude.Virus] WARNING -RE: [Declude.JunkMail]

2007-03-12 Thread David Barker
All set, made minor change to the installer if you downloaded prior to Rob's email download again. David Barker Director of Product Management Your Email security is our business 978.499.2933 office 978.988.1311 fax [EMAIL PROTECTED] -Original Message- From: [EMAIL PROTECTED] [m

[Declude.Virus] Declude 4.3.40 Released

2007-03-12 Thread David Barker
changes. David Barker Director of Product Management Your Email security is our business 978.499.2933 office 978.988.1311 fax [EMAIL PROTECTED] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.

[Declude.JunkMail] Declude 4.3.40 Released

2007-03-12 Thread David Barker
changes. David Barker Director of Product Management Your Email security is our business 978.499.2933 office 978.988.1311 fax [EMAIL PROTECTED] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubs

[Declude.Virus] Next Declude Release

2007-02-28 Thread David Barker
PCREEXPRESSION Example: BODY5 PCRE(?i:v\s*[i!|]+\s*a\s*g\s*r\s*a) David Barker Director of Product Management Your Email security is our business 978.499.2933 office 978.988.1311 fax [EMAIL PROTECTED] --- This E-mail came from the Declude.Virus mailing list. To unsubs

[Declude.JunkMail] Next Declude Release

2007-02-28 Thread David Barker
PCREEXPRESSION Example: BODY5 PCRE(?i:v\s*[i!|]+\s*a\s*g\s*r\s*a) David Barker Director of Product Management Your Email security is our business 978.499.2933 office 978.988.1311 fax [EMAIL PROTECTED] --- This E-mail came from the Declude.JunkMail mailing list. To unsubs

RE: [Declude.Virus] pay-pal phishing

2007-02-15 Thread David Barker
One way you could do this is to use the following lines in a filter #PAYPAL REVDNS END ENDSWITH.paypal.com MAILFROM20 ENDSWITH@paypal.com Also as far as I know the genuine paypal IP's are listed with BONDEDSENDER David Barker Director of Product Manag

RE: [Declude.Virus] Release Update

2007-02-01 Thread David Barker
e Hi David, What will this release contain? -Nick David Barker wrote: > We had scheduled a release for 31 January 2007, which we are delaying > for some changes next date is Monday 5 February 2007 > > Thanks > David Barker > Director of Product Management > Your Emai

[Declude.JunkMail] Release Update

2007-02-01 Thread David Barker
We had scheduled a release for 31 January 2007, which we are delaying for some changes next date is Monday 5 February 2007 Thanks David Barker Director of Product Management Your Email security is our business 978.499.2933 office 978.988.1311 fax [EMAIL PROTECTED] --- This E-mail came from the

[Declude.Virus] Release Update

2007-02-01 Thread David Barker
We had scheduled a release for 31 January 2007, which we are delaying for some changes next date is Monday 5 February 2007 Thanks David Barker Director of Product Management Your Email security is our business 978.499.2933 office 978.988.1311 fax [EMAIL PROTECTED] --- This E-mail came from the

RE: [Declude.Virus] Outlook 'Boundary Space Gap' Vulnerability

2007-01-25 Thread David Barker
I apologize I copied the wrong directive (Chris was correct), here is the full list: #ALLOWVULNERABILITY OBJECTDATA #ALLOWVULNERABILITY OLCR #ALLOWVULNERABILITY OLSPACEGAP #ALLOWVULNERABILITY OLBLANKFOLDING #ALLOWVULNERABILITY OLMIMEHEADER #ALLOWVULNERABILITY OLMIMESEGMIME

RE: [Declude.Virus] Outlook 'Boundary Space Gap' Vulnerability

2007-01-25 Thread David Barker
tially allowing a virus to get past your av scanner if it exploits this vulnerability. David Barker Director of Product Management Your Email security is our business 978.499.2933 office 978.988.1311 fax [EMAIL PROTECTED] -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED

[Declude.Virus] Declude 4.3.24 AVG Interim

2006-12-12 Thread David Barker
This version is available as an interim release, for those of you who have the login to interim, it is the same, be sure to download your appropriate decludeproc and the avgsdk.dll. If want to try the interim release email me directly. David Barker Director of Product Management Your Email

[Declude.JunkMail] Declude 4.3.24 AVG Interim

2006-12-12 Thread David Barker
This version is available as an interim release, for those of you who have the login to interim, it is the same, be sure to download your appropriate decludeproc and the avgsdk.dll. If want to try the interim release email me directly. David Barker Director of Product Management Your Email

RE: [Declude.Virus] Declude Security Suite 4.3.23 Released / AVG Vulnerability?

2006-12-08 Thread David Barker
> Thanks. > > -----Original Message- > From: "David Barker" <[EMAIL PROTECTED]> Sent 11/24/2006 8:08:51 PM > To: declude.virus@declude.com > Subject: RE: [Declude.Virus] AVG Vulnerability > > From AVG "the update has been released for beta testing, if

[Declude.Virus] Declude Security Suite 4.3.23 Released

2006-12-07 Thread David Barker
directive is ON DEC FIX New CommTouch Dll David Barker Director of Product Management Your Email security is our business 978.499.2933 office 978.988.1311 fax [EMAIL PROTECTED] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL

[Declude.JunkMail] Declude Security Suite 4.3.23 Released

2006-12-07 Thread David Barker
directive is ON DEC FIX New CommTouch Dll David Barker Director of Product Management Your Email security is our business 978.499.2933 office 978.988.1311 fax [EMAIL PROTECTED] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL

RE: [Declude.Virus] Log file

2006-12-05 Thread David Barker
file Thanks David. Was that left over from a previous version that didn't include AVG built in? Todd -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Barker Sent: Tuesday, December 05, 2006 3:20 PM To: declude.virus@declude.com Subjec

RE: [Declude.Virus] Log file

2006-12-05 Thread David Barker
enced below refer to the Pro version, or the scanner version? Todd -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Barker Sent: Tuesday, December 05, 2006 2:18 PM To: declude.virus@declude.com Subject: RE: [Declude.Virus] Log file Does this exist on

RE: [Declude.Virus] Log file

2006-12-05 Thread David Barker
Does this exist on your server ? C:\Progra~1\Grisoft\AVG7\avg.exe David B www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Todd Richards Sent: Tuesday, December 05, 2006 3:16 PM To: declude.virus@declude.com Subject: [Declude.Virus] Log f

[Declude.JunkMail] Interim Release 4.3.23 - need a few volunteers

2006-11-30 Thread David Barker
turned off. * Zip vulnerability, declude is holding a valid zip file as vulnerability * Default for the OUTBOUNDSCANNINGSPAM directive is ON * New CommTouch Dll Email me, I cannot promise to respond to everyone, I will stop replying when I have enough volunteers. David Barker Director of Product

[Declude.Virus] Interim Release 4.3.23 - need a few volunteers

2006-11-30 Thread David Barker
turned off. * Zip vulnerability, declude is holding a valid zip file as vulnerability * Default for the OUTBOUNDSCANNINGSPAM directive is ON * New CommTouch Dll Email me, I cannot promise to respond to everyone, I will stop replying when I have enough volunteers. David Barker Director of Product

RE: [Declude.Virus] AVG Vulnerability

2006-11-24 Thread David Barker
bility Any updates on this yet? Should we be turning off AVG scanning? Mark Reimer IT System Admin American CareSource 972-308-6887 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Barker Sent: Tuesday, November 21, 2006 9:24 AM To: declud

RE: [Declude.Virus] AVG Vulnerability

2006-11-24 Thread David Barker
PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Barker Sent: Tuesday, November 21, 2006 9:24 AM To: declude.virus@declude.com Subject: RE: [Declude.Virus] AVG Vulnerability Darrell, We are currently looking into this new report and are contacting AVG we will post here as soon as we have

RE: [Declude.Virus] Hijack Question

2006-10-31 Thread David Barker
unusual. - Original Message - From: "David Barker" <[EMAIL PROTECTED]> To: Sent: Tuesday, October 31, 2006 1:52 PM Subject: RE: [Declude.Virus] Hijack Question > 1. Make sure that the Real-Time scanner of F-prot is disabled > > 2. At a minimum you should b

RE: [Declude.Virus] Hijack Question

2006-10-31 Thread David Barker
suggestions? Regards Mario Antonio - Original Message - From: "David Barker" <[EMAIL PROTECTED]> To: Sent: Tuesday, October 31, 2006 1:58 PM Subject: RE: [Declude.Virus] Hijack Question > There should not be orphan files I would think you are running some type of >

RE: [Declude.Virus] Hijack Question

2006-10-31 Thread David Barker
Antonio - Original Message - From: "David Barker" <[EMAIL PROTECTED]> To: Sent: Tuesday, October 31, 2006 10:18 AM Subject: RE: [Declude.Virus] Hijack Question > Stop/Start the decludeproc will reset the hijack counter. > > David B > www.declude.c

RE: [Declude.Virus] Hijack Question

2006-10-31 Thread David Barker
Stop/Start the decludeproc will reset the hijack counter. David B www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mario Antonio Sent: Tuesday, October 31, 2006 9:42 AM To: declude.virus@declude.com Subject: [Declude.Virus] Hijack Question

RE: [Declude.Virus] ALLOWVULNERABILITIES Directive

2006-10-12 Thread David Barker
Currently this only works on a fully qualified email address. David Barker Director of Product Development Your Email security is our business 978.499.2933 office 978.988.1311 fax [EMAIL PROTECTED] -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of

RE: [Declude.Virus] Upgrade from 3.1.x to 4.3.14

2006-10-09 Thread David Barker
sco IOS. Any changes made can ultimately be quickly reverted by rebooting the device, so long as the command was not written to memory. The command is: access-list Internet-Inbound permit tcp any host xx.xx.xx.xx eq smtp For more info please check the knowledge base at www.cisco.com David Bar

RE: [Declude.Virus] Release 4.3.14 and 3.1.3

2006-09-28 Thread David Barker
Subject: RE: [Declude.Virus] Release 4.3.14 and 3.1.3 When I go to download I get 437??? Harry Vanderzand inTown Internet & Computer Services 519-741-1222 > -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of > David Barker > Sent: Thu

RE: [Declude.Virus] Release 4.3.14 and 3.1.3

2006-09-28 Thread David Barker
? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Barker Sent: Thursday, September 28, 2006 11:39 AM To: declude.junkmail@declude.com; declude.virus@declude.com Subject: [Declude.Virus] Release 4.3.14 and 3.1.3 Declude Security Suite 4.3.14

RE: [Declude.Virus] AVG?

2006-09-22 Thread David Barker
Title: AVG? AVG is scanner 0 run your logs on DEBUG and you will see it there. David B www.declude.com From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Hirthe, AlexanderSent: Friday, September 22, 2006 11:25 AMCc: declude.virus@declude.comSubject: [Declude.Virus] AVG? Hell

RE: [Declude.Virus] New feature needed

2006-08-11 Thread David Barker
BanNotify.eml is sent out to people who try sending a banned file extension. BounceNotify.eml is used with the BOUNCEONLYIFYOUMUST ACTION which will send a "bounce" message - this should NOT be used except in rare cases. David B www.declude.com -Original Message- From: [EMAIL PROTECTED] [

RE: [Declude.Virus] Upcoming Declude Release

2006-07-26 Thread David Barker
] [mailto:[EMAIL PROTECTED] On Behalf Of David Barker Sent: Wednesday, July 26, 2006 6:10 AM To: declude.junkmail@declude.com; declude.virus@declude.com Subject: [Declude.Virus] Upcoming Declude Release This is just an FYI. Our next release is scheduled for 2 Aug and we are aiming to add the following

RE: [Declude.Virus] DrWatson errors

2006-07-18 Thread David Barker
Make sure you have a virus.cfg file in your \Declude directory with the VIRDIR set. David B www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John Dobbin Sent: Tuesday, July 18, 2006 5:07 PM To: declude.virus@declude.com Subject: RE: [Declu

RE: [Declude.Virus] 4.2.20 Error in Log

2006-07-13 Thread David Barker
BUILTINSCANNEROFF Located in Virus.cfg. Will disable the internal AVG scanner. David B www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darrell ([EMAIL PROTECTED]) Sent: Thursday, July 13, 2006 8:34 AM To: declude.virus@declude.com Sub

RE: [Declude.Virus] Ambiguous Virus Scanner ID in log

2006-07-12 Thread David Barker
The External McAfee Scanner, if you run logs on DEBUG you will see that the AVG (Internal) Scanner reports as AVG. David B www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Andy Schmidt Sent: Wednesday, July 12, 2006 5:38 PM To: declude.vir

RE: [Declude.Virus] 4.2 build 20 Released 6 July 2006

2006-07-07 Thread David Barker
, In reference the the NONSTANDARDHDR vulnerability, did you include the ability to turn this off? Thanks, Matt David Barker wrote: >EVAADD New NONSTANDARDHDR vulnerability test. Messages found to >have broken headers are moved to the \virus folder > &g

[Declude.Virus] 4.2 build 20 Released 6 July 2006

2006-07-07 Thread David Barker
is moved to the \error folder SM ADD Decludeproc will not start without a valid domainlist.xml SM FIX QUEUEFILE_SAVEFILE the log is showing the correct directory path SM FIX Allows admin to set VIRDIR to any directory path in the virus.cfg David Barker Product Manager

[Declude.JunkMail] 4.2 build 20 Released 6 July 2006

2006-07-07 Thread David Barker
is moved to the \error folder SM ADD Decludeproc will not start without a valid domainlist.xml SM FIX QUEUEFILE_SAVEFILE the log is showing the correct directory path SM FIX Allows admin to set VIRDIR to any directory path in the virus.cfg David Barker Product Manager

RE: [Declude.Virus] New Virus: zipped word doc with Macro-Virus

2006-06-28 Thread David Barker
of these flaws, and their role in making sure that Declude can respond rapidly to such things not just now, but as they occur in the future. Thanks, Matt David Barker wrote: Matt, Headers not using proper CRLF line breaks is currently being tested using the

RE: [Declude.Virus] New Virus: zipped word doc with Macro-Virus

2006-06-28 Thread David Barker
ase 64 encoding causing Declude Virus to fail decoding, WHITELIST IP being applied before IPBYPASS, and the issue where Declude's headers are inserted at the bottom of the message when the headers don't use proper CRLF line breaks? Thanks, Matt David Barker wrote: >I have added the

RE: [Declude.Virus] New Virus: zipped word doc with Macro-Virus

2006-06-28 Thread David Barker
I have added the request to the wish list. We are focusing on replicating problems and fixing items from the list I had posted earlier last week. We are looking to do a release Thursday 8 July it is currently under going testing. This is all obviously subject to change just trying to keep you infor

RE: [Declude.Virus] New feature needed

2006-06-20 Thread David Barker
needed David, Any idea when it might make it as a feature in the code? Goran Jovanovic Omega Network Solutions > -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David > Barker > Sent: Tuesday, June 20, 2006 2:58 PM > To: declude.vi

RE: [Declude.Virus] New feature needed

2006-06-20 Thread David Barker
Added to the development wish list. David B www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Goran Jovanovic Sent: Tuesday, June 20, 2006 2:12 PM To: declude.virus@declude.com Subject: [Declude.Virus] New feature needed Hi, I would like

RE: [Declude.Virus] new virus

2006-06-16 Thread David Barker
If they are encrypted zips ensure you have:   BANEXT    EZIP   in your virus.cfg   David B www.declude.com From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Bruce LoughlinSent: Friday, June 16, 2006 4:31 PMTo: declude.virus@declude.comSubject: [Declude.Virus] new virus Is a

RE: [Declude.Virus] AVG not updating?

2006-06-01 Thread David Barker
Dave, What is the IP address of you mail server ? David B www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Dodell Sent: Wednesday, May 31, 2006 7:17 PM To: Declude.Virus@declude.com Subject: [Declude.Virus] AVG not updating? I have

RE: [Declude.Virus] AVG Database file dates?

2006-05-27 Thread David Barker
When we do a build we include the latest database files provided by AVG, the files consist of the main database file and the incremental updates, depending on when you get updates certain files will have later dates than others, over time the incrementals are added to the main database, that

RE: [Declude.Virus] reque slips by Declude?

2006-05-18 Thread David Barker
are saying that the X is no longer needed? You just drop stuff in the spool directory and Declude will ignore it? That in order for Declude to rescan something it now has to be put in the proc directory? Original Message > From: "David Barker" <[EMAIL PR

RE: [Declude.Virus] reque slips by Declude?

2006-05-18 Thread David Barker
I Remove the x and place the files in the \proc directory. David B www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darrell ([EMAIL PROTECTED]) Sent: Thursday, May 18, 2006 7:59 AM To: Declude.Virus@declude.com Subject: Re: [Declude.Virus]

RE: [Declude.Virus] 4.2.3 Built-in scanner

2006-05-09 Thread David Barker
Virusname variables have a problem. Could you check this? Thank you, Uwe - Original Message - From: "David Barker" <[EMAIL PROTECTED]> To: Sent: Tuesday, May 09, 2006 3:13 PM Subject: RE: [Declude.Virus] 4.2.3 Built-in scanner > 1. Use the test virus sender http:/

RE: [Declude.Virus] 4.2.3 Built-in scanner

2006-05-09 Thread David Barker
he default behavior is for Declude to call all scanners" and I have the "EXITSCANONVIRUSDETECT OFF" line still completely commented out, but looking at the logs it appears that the default behavior is just the opposite. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROT

RE: [Declude.Virus] 4.2.3 Built-in scanner

2006-05-09 Thread David Barker
1. Use the test virus sender http://www.declude.com/Articles.asp?ID=99 2. Check your virus logs 3. Declude\Scanners\AVG\DB 4. Check the date on the database files David B www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John Shacklett Sent

RE: [Declude.Virus] (re)Installing Declude v1.65 on Imail 8.22?

2006-05-08 Thread David Barker
IMail made some significant changes to their product from IMail 8.2x causing issues when working with Declude as a single application. Any version of Declude prior to the new Declude service will NOT work correctly with IMail 8.2x and up. The minimum to be used is Declude 3.1   David B www.d

RE: [Declude.Virus] Built in virus detector

2006-05-04 Thread David Barker
Looks like the email will go out tomorrow. Just wanted to update you. David B www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Barker Sent: Thursday, May 04, 2006 10:11 AM To: Declude.Virus@declude.com Subject: RE: [Declude.Virus

RE: [Declude.Virus] Built in virus detector

2006-05-04 Thread David Barker
ust joined the Releases list. Has that notice -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Barker Sent: Thursday, May 04, 2006 7:02 AM To: Declude.Virus@declude.com Subject: RE: [Declude.Virus] Built in virus detector Guys, As you know I

RE: [Declude.Virus] Built in virus detector

2006-05-04 Thread David Barker
Guys, As you know I have been posting new releases to the board when there has been a new release, I have held off doing this a couple of days as I wanted to make sure that those who had the new release were getting updates as they should for the virus DB. Which they are, and that is a good thing.

[Declude.Virus] Testing the Boards

2006-04-27 Thread David Barker
PING --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.

RE: [Declude.Virus] stop postmaster emails going out

2006-04-25 Thread David Barker
There are 4 virus notification messages. To not have them go out remove them from the \Declude directory.   postmaster.eml otherpostmaster.eml sender.eml recip.eml   David B www.declude.com From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Craig EdmondsSent: Tuesday, April 25,

[Declude.Virus] Declude 3.1 and 4.1 Release Notes

2006-04-06 Thread David Barker
Declude 3.1 and 4.1 Release Notes http://www.declude.com/Articles.asp?ID=122 available. David B www.declude.com --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found

[Declude.Virus] Declude Release

2006-03-13 Thread David Barker
Declude Release 3.0.6.4 and 4.0.9.4 HI FIX Corrected logging issue and locked file problem trying to move .hdr files in SmarterMail SM ADD Support for MAILBOX action in Smartermail CON FIX Confirm for Imail now working correctly David B www.declude.com --- This E-mail

RE: [Declude.Virus] Updates from Declude

2006-03-08 Thread David Barker
Declude Security Suite and Declude 3.0.6 Fix for Confirm Fix for Hijack logging error for console Add Mailbox action for SM David Barker www.declude.com From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Nick Hayer Sent: Wednesday, March 08, 2006

RE: [Declude.Virus] Updates from Declude

2006-03-08 Thread David Barker
The next release of Declude which is currently being tested and soon to be released has the confirm changes included.   David B www.declude.com From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Grant GriffithSent: Wednesday, March 08, 2006 12:47 PMTo: Declude.Virus@declude.com

RE: [Declude.Virus] [Declude.JunkMail] Declude 3.0 / 4.0

2006-02-12 Thread David Barker
m with this new scheme. Any wonder people are upset? I really suggest you take a good, long look at the troubles experienced by Ipswitch over the last year, and decide if you really want to go through all that. And if you do, then change the names to something besides 3.0 and 4.0. Ben Bednarz BC Web --

RE: [Declude.Virus] [Declude.JunkMail] Declude 3.0 / 4.0

2006-02-12 Thread David Barker
om: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Don Brown Sent: Sunday, February 12, 2006 11:23 AM To: Declude.JunkMail@declude.com; Declude.Virus@declude.com Subject: Re: [Declude.Virus] [Declude.JunkMail] Declude 3.0 / 4.0 Saturday, February 11, 2006, 9:47:07 AM, David Barker <[EM

[Declude.Virus] Declude 3.0 / 4.0

2006-02-11 Thread David Barker
1. The definition of an Annual Subscription is a license to run Declude for a period of a year at which time the Annual Subscription has to be renewed to continue running Declude. Annual Subscription does NOT apply to customers of Declude prior 8 Feb 06. 2. Existing Customers prior to 8 Feb 06 CAN

RE: [Declude.Virus] Clam AV

2006-01-23 Thread David Barker
Once Installing Clamwin the following can be used as a configuration: SCANFILE [Drive:]\[Path]\clamwin\bin\clamscan.exe --verbose --database="[Drive:]\[Path]\db" --tempdir="c:\Temp" --no-summary -l report.txt VIRUSCODE 1 * Your SCANFILE line is on a single line. ** Ensure you have a C:\Temp dir

RE: [Declude.Virus] Notifications

2005-12-05 Thread David Barker
Not released yet but has tested fine as an interim, should have the virus notifications for SM, you can try the latest version: Imail http://www.declude.com/version/Upgrade/IM/Decludeproc30522.exe SmarterMail http://www.declude.com/version/Upgrade/SM/Decludeproc30522.exe David B www.declude.com

[Declude.Virus] Declude 3.0.5.21 Posted

2005-11-30 Thread David Barker
JM - INVITEFIXON Located in Declude.cfg. Some customers had issues related to Outlook meeting requests appearing as text only. The default for this directive is OFF. JM - Fixed skipping of certain DNSBL tests. JM - STOPALLTESTS is now working correctly EVA - Incorrect log entries regarding

[Declude.Virus] Declude and IMail 2006

2005-11-30 Thread David Barker
We have had access to the Beta and have run all our standard tests successfully. The caveat that I will offer is that there is no way in which we can replicate every combination of tests and events in our simulated environments. But to the best of our knowledge Declude and IMail 2006 seem to be OK

RE: [Declude.Virus] how is Declude 3.x?

2005-11-25 Thread David Barker
Try adding the following line to your declude.cfg WINSOCKCLEANUP ON Stop/Restart the Decludeproc service David Barker www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of sbsi lists Sent: Friday, November 25, 2005 9:27 AM To: IMail Admin

RE: [Declude.Virus] Virus Config Update

2005-11-23 Thread David Barker
/NOMEM /NOSELF /ARC /REPORT=report.txt VIRUSCODE 4 VIRUSCODE 5 VIRUSCODE 6 VIRUSCODE 7 VIRUSCODE 9 REPORT identified   David Barker www.declude.com   -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Don Brown Sent: Wednesday, November 23, 2005 10:12 PM

[Declude.Virus] Virus Config Update

2005-11-23 Thread David Barker
1. I have noticed that a new virus exit code being reported on AVG Exit Code 9 - Double extension If you are running AVG and want to block double extensions eg. Password.doc .exe Add the following line to your virus.cfg VIRUSCODE 9 Other additional codes are: 4 - suspicion detected by

<    1   2   3   >