re: [Declude.Virus] OT: Alligate as a gateway for providers ?

2008-07-20 Thread Douglas Cohn
If Declude is running the load will not change. We found that declude with using 99% of the resources on our server. We turned on Greylisting added SpamAssasin and turned off declude. Then took the same server and created virtual servers on it. I now have an extra virtual server I use for

RE: [Declude.Virus] F-Prot Version 6

2007-03-24 Thread Douglas Cohn
] [mailto:[EMAIL PROTECTED] On Behalf Of Douglas Cohn Sent: Tuesday, March 13, 2007 8:50 PM To: declude.virus@declude.com Subject: RE: [Declude.Virus] F-Prot Version 6 F-prot is $50 for 10 licenses per year. $5 per machine per year. Version 6 Why is that not still reasonable? Please

RE: [Declude.Virus] F-Prot Version 6

2007-03-13 Thread Douglas Cohn
F-prot is $50 for 10 licenses per year. $5 per machine per year. Version 6 Why is that not still reasonable? Please explain -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kevin Bilbee Sent: Thursday, February 01, 2007 8:33 PM To:

RE: [Declude.Virus] I'm currently on a business trip down south and will be returning January 5th, 2007. If t

2007-01-06 Thread Douglas Cohn
Yes this is plain DUMB. He should be shot IMO. Declude should look at this as a way to get people off the list. More people leave lists when things like this happen than at any other time. Douglas Cohn VP Engineering Photogra, Inc. www.photogra.com -Original Message- From: [EMAIL

RE: [Declude.Virus] I'm currently on a business trip down south and will be returning January 5th, 2007. If t

2007-01-06 Thread Douglas Cohn
I like both options. But killing him is also a good idea Douglas Cohn VP Engineering Photogra, Inc. www.photogra.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Andy Schmidt Sent: Thursday, January 04, 2007 6:01 PM To: declude.virus@declude.com

RE: [Declude.Virus] Sender.eml was sent even though forging virus?

2006-12-22 Thread Douglas Cohn
Isn't it better to just remove all the eml files so as to be more of the solution and less of the problem. It just seems that is all of us stopped sending eml's that millions of useless messages would be stopped. What am I missing? What value do these messages possibly have? Doug

RE: [Declude.Virus] Slightly OT: Encrypting or Securing Email Content

2005-10-12 Thread Douglas Cohn
Hey stupid me but why not use a file transfer program for transferring files and not worry about what you block in email. That is what FTP was invented for anyway. If you have any type of Intranet or help desk system you should have a place that allows users to both upload files and download

RE: [Declude.Virus] Version 3.0.5.5

2005-09-30 Thread Douglas Cohn
This is why I always wait for the bleeding edge people to suffer before I touch anything. After all the bugs get worked out of it and then 4 or 5 weeks later I will install it. But without you guys nothing would ever get going. So thanks. Diug -Original Message- From: [EMAIL

RE: [Declude.Virus] Declude using CBL to block users sending mail?????

2005-06-18 Thread Douglas Cohn
19:02:06 -0400 Received: from UnknownHost [216.74.167.74] by mail.inetservers.com with SMTP; Sun, 12 Jun 2005 16:00:38 -0400 From: douglas cohn [EMAIL PROTECTED] To: [EMAIL PROTECTED] Subject: Test inetservers Date: Sun, 12 Jun 2005 16:00:32 -0400 MIME-Version: 1.0 Content-Type: text/plain

RE: [Declude.Virus] Declude using CBL to block users sending mail?????

2005-06-18 Thread Douglas Cohn
positives if you weight things optimally. Matt Douglas Cohn wrote: My desktop IP was erroneously listed on CBL. It seems that declude is checking autheticated users sending mail for CBL and according to CBL this is wrong. SEE below Here is the header showing what went on with the actual Ips

RE: [Declude.Virus] Declude using CBL to block users sending mail?????

2005-06-18 Thread Douglas Cohn
Now to my final question and the reason all of this happened. Imagine you work for developers that have an opted in mailing list with close to a million email addresses. Valid opted in users. When someone opts out they are removed. They can email opt out, they can even call the office and opt

[Declude.Virus] Declude using CBL to block users sending mail?????

2005-06-13 Thread Douglas Cohn
2005 18:34:59 -0400 From: douglas cohn [EMAIL PROTECTED] To: [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Subject: Test cbl Date: Sun, 12 Jun 2005 18:34:52 -0400 MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit X-Mailer: Microsoft Office Outlook, Build

RE: [Declude.Virus] F-Prot update

2005-06-09 Thread Douglas Cohn
They always said it!! Here's the previous update notice We recommend that users of F-Prot Antivirus for Windows update their programs to version 3.16b as soon as possible. Please visit our update center to update your program now: From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On

RE: [Declude.Virus] Second Scanner

2005-06-05 Thread Douglas Cohn
Mcafee is a CPU HOG. Uses double the CPU of Fprot. I have a low powered machine and cannot even run Mcafee but fprot is no problem. Both is unreal. This is the mcafee command line scanner. The declude archive includes a Wget updater that works fine. I use a 4NT update script but the Wget is

RE: [Declude.Virus] Orphaned eml files SMARTERMAIL current DECLUDE 206

2005-05-26 Thread Douglas Cohn
would recommend implementing the 2.0.6.10 (or higher) incremental release; it does not run the routine to reprocess email. Declude Engineering -- -Original Message- -- From: [EMAIL PROTECTED] [mailto:Declude.Virus- -- [EMAIL PROTECTED] On Behalf Of Douglas Cohn -- Sent: Tuesday, May 10

[Declude.Virus] Orphaned eml files SMARTERMAIL current DECLUDE 206

2005-05-10 Thread Douglas Cohn
I have orphaned hdr files in my spool directory like this C:\SmarterMail\Spool\62298363.~DR Then I found this in proc C:\SmarterMail\Spool\proc\62298363.EML Has anyone else seen this? Doug --- [This E-mail scanned for viruses by Declude Virus] --- This E-mail came from the

RE: [Declude.Virus] ALLOWVULNERABILITIES Directive

2005-05-04 Thread Douglas Cohn
THANK YOU FOR THE Participation in the forum!!! From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Ralph KrausseSent: Wednesday, May 04, 2005 9:11 AMTo: Declude.Virus@declude.comSubject: [Declude.Virus] ALLOWVULNERABILITIES Directive We are currently looking into a

RE: [Declude.Virus] f-prot update script

2005-05-04 Thread Douglas Cohn
This update is the worst method IMO (The one referenced in the link here). I used to update every hour and using this I would find the machine with the updater hung on the screen timed out at least once a week. W2K Server SP4. What OS are you using it on where it does NOT create issues? I

RE: [Declude.Virus] Who is minding the store

2005-05-02 Thread Douglas Cohn
would order a renewal. But he left. Doug -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jonathan Sent: Sunday, May 01, 2005 5:59 PM To: Declude.Virus@declude.com Subject: Re: [Declude.Virus] Who is minding the store Douglas Cohn wrote: Using

RE: [Declude.Virus] Is this sort of stuff necessary on a list?

2005-05-02 Thread Douglas Cohn
Or even allowed on a list What many lists I belong to help avoid this is disallow any reposting of the footers. That way an automated process like this would never get through. It requires the users posting, us, to cut off the footers manually but that keeps the lists mean and lean. Initially I

[Declude.Virus] Who is minding the store

2005-05-01 Thread Douglas Cohn
What I find very odd is where is declude technical participation on this list? Since Scott left I see no SOLID ANSWERS to many questions. Answers that often came from Scott. I surely understand that there are many very skilled programmers, technicians and network managers that are all

RE: [Declude.Virus] Skipifforging not working on Mytob

2005-04-16 Thread Douglas Cohn
The only other difference is that I'm using SmarterMail. That cause your Smarter. The difference between SmarterMail and Imail is just unreal. It is like the difference between breathing and having a plastic bag over your head. Imail always sucked but I lived with it because I owned a copy

[Declude.Virus] Current Stable Declude manual install IMAIL only

2005-01-30 Thread Douglas Cohn
What is the current stable Declude version for IMAIL systems? Is there still a version that allows manual updating of declude.exe? Of course a legally licensed copy I refer to only. Doug --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by

[Declude.Virus] Mcaffee commandline scanner is it really free with updates??

2004-12-15 Thread Douglas Cohn
I am confused. I have recently found the Mcaffee command line scanner on several freeware apps. Is it free? They claim everything on their site is 100% legit. Additionally they even explain how to update it using the superdat. Is it too old to be properly effective?? Not the signatures but

RE: [Declude.Virus] What's the IFrame vulnerability

2004-12-03 Thread Douglas Cohn
This may help http://www.microsoft.com/technet/security/bulletin/ms04-040.mspx -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Bob McGregor Sent: Thursday, December 02, 2004 1:06 PM To: Declude-List Subject: [Declude.Virus] What's the IFrame

[Declude.Virus] Issues with F-prot 3.16 or not?

2004-11-24 Thread Douglas Cohn
OOOPs Just got this. FRISK Software has released version 3.16a of F Prot Antivirus for Windows. More information on this release can be found on our website: http://www.f-prot.com/news/gen_news/041124_release_win316a.html We recommend that users of F-Prot Antivirus for Windows update their

RE: [Declude.Virus] Server Virus Scanners

2004-11-12 Thread Douglas Cohn
F-prot seems to work fine for on-demand for me but I do not have any have excel and word uploaded files. I figured since I had to buy a 10 machine license might as well make some use out of it. There is still an issue with the auto updater occassionally timing out though so I use batch files to

RE: [Declude.Virus] Server Virus Scanners

2004-11-12 Thread Douglas Cohn
Ignore my previous post about F-prot on your server. It will not suffice if you need to exclude certain folders from being scanned as I have found no method that allows that yet. As you know it is lightweight cannot be optimized to ignore specific folders. For servers that are not accessed by

RE: [Declude.Virus] F-Prot Updater timing out?

2004-11-05 Thread Douglas Cohn
I believe the updater is just very poorly written because I see this happen all the time on brand new systems that run XP SP2, W2k SP4, etc etc. With and without KVM's. The solution unlunkily is to use one of the batch files. I believe they simply do not have enough bandwidth at F-prot and the

RE: [Declude.Virus] IpSwitch Collaboration Suite Yearly renewal costs up to $4995 per server per year

2004-11-05 Thread Douglas Cohn
These are not maintenance fees but cross grade. It's only 10 TIMES the cost of the current renewal for an Unlimited version of Imail. HAHAHAHA We are dumping IMAIL within the next year. It is mopre than Exchange as far as I'm concerned. About triple the price for small in house corporate

RE: [Declude.Virus] F-Prot Updater timing out?

2004-11-05 Thread Douglas Cohn
seconds. Darin. - Original Message - From: Douglas Cohn [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Friday, November 05, 2004 7:01 PM Subject: RE: [Declude.Virus] F-Prot Updater timing out? I believe the updater is just very poorly written because I see this happen all the time on brand

RE: [Declude.Virus] ANN: SPAMC32 (SpamAssassin SPAMC for Declude) 0.5.56 released

2004-11-03 Thread Douglas Cohn
Plugs into Declude Virus??? How does it do that or was this intended for the Declude JunkMail list not the Virus list -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Sanford Whiteman Sent: Tuesday, November 02, 2004 6:31 PM To: [EMAIL PROTECTED]

RE: [Declude.Virus] Unknown virus warnings

2004-10-29 Thread Douglas Cohn
I have been using Viruscode 8 for more than 6 months and have not received even 1 false positive, But my users are not a very large group and they most likely do not send a lot of attachments via email. I have taught them how to transfer files actually via ftp. DC -Original Message-

RE: [Declude.Virus] Spool Dir

2004-10-14 Thread Douglas Cohn
I personally do not like installing anything on my Imail servers. That said I use a sinple dos batch file to delete everything that is X days old. I run it as a scheduled task daily. Doug -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kevin Rogers

RE: [Declude.Virus] Spool Dir

2004-10-14 Thread Douglas Cohn
Douglas Cohn wrote: I personally do not like installing anything on my Imail servers. That said I use a sinple dos batch file to delete everything that is X days old. I run it as a scheduled task daily. Doug -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf

RE: [Declude.Virus] JS.Downloader.Trojan

2004-10-13 Thread Douglas Cohn
I have F-prot marking my Thunderbird mail program files as JS.Downloader.Trojan. Symantec Corp 8.0 sees nothing suspicious about the files. Then today F-prot looked in some static Office 2000 files and determined that AGENTANM.DLL AGENTCTL.DLL AGENTDP2.DLL AGENTDPV.DLL AGENTMPX.DLL AGENTPSH.DLL

RE: [Declude.Virus] Deleting Vulnerability

2004-10-01 Thread Douglas Cohn
You can run a scheduled task that deletes the contents of the virus folder every x minutes, hours, days. DC -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John Carter Sent: Friday, October 01, 2004 11:02 AM To: [EMAIL PROTECTED] Subject:

RE: [Declude.Virus] Declude Release 1.81 - Error on Web Site

2004-10-01 Thread Douglas Cohn
Title: Message I am sorry. I misunderstood Graphic/text. I now see the graphic is the ARROW which I never attempted to click at all. So when I said it works for me I was referring to the Text which for some dumb reason I took as graphic. (yes it's text). Both arrows definitely link to

RE: [Declude.Virus] Lines in the virus.cfg file

2004-10-01 Thread Douglas Cohn
Now that 1.81 is released what is the recommendation by DECLUDE (SCOTT) regarding the config file.?? IE do we allow the AV software to scan jpegs by removing the line SKIPEXT JPG or do we allow Declude to take care of it completely . From what I understand (and I know ugotz) the

RE: [Declude.Virus] Release version

2004-09-28 Thread Douglas Cohn
rather than overwriting the declude.exe file in the imail root directory when you unzip the file. Jim Matuska Jr. Computer Tech II CCNA Nez Perce Tribe Information Systems [EMAIL PROTECTED] - Original Message - From: Douglas Cohn [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Tuesday

RE: [Declude.Virus] OT: F prot as a desktop scanner

2004-08-01 Thread Douglas Cohn
I have used it on client machines for the past 6 months and also find it equal to Norton Corp except for one thing. It handles mail clients differently in that it does not scan email as they come in but instead seems to scan it only when you attempt to read it. Norton Corp seemed to catch the

RE: [Declude.Virus] I do not think this should of failed.

2004-07-16 Thread Douglas Cohn
It may be worth your time to contact Yahoo and alert them of this if it is really an issue. If they give a hoot (and they very well may) they will put some text on the page to use the Url and not the filename when sending links of maps in email. Doesn't Yahoo have a link for sending a map to

RE: [Declude.Virus] Mcafee command line scanner

2004-07-07 Thread Douglas Cohn
That is the correct price for that LICENSE LEVEL (L) VCLCAE-AA-LH But you must be GOVERNMENT and I believe that price is for 10,000+ copies. License Pricing IDIQ:Level L,Volume:,Government: McAfee VirusScan Command Line Scanner Standard - complete package Specifications General Compatibility

RE: [Declude.Virus] F-Prot Version 3.15 w/Declude

2004-07-06 Thread Douglas Cohn
Message - From: Douglas Cohn [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Sunday, July 04, 2004 4:58 PM Subject: RE: [Declude.Virus] F-Prot Version 3.15 w/Declude This is the command we run from task manager and have for some time with no issues. C:\Program Files\FSI\F-Prot\FP-Updater

RE: [Declude.Virus] F-Prot Version 3.15 w/Declude

2004-07-04 Thread Douglas Cohn
to the console. Is there a good reason not to do it this way?? ~Joe - Original Message - From: Douglas Cohn [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Thursday, July 01, 2004 3:53 PM Subject: RE: [Declude.Virus] F-Prot Version 3.15 w/Declude I have been doing that exact thing for months

RE: [Declude.Virus] F-Prot Version 3.15 w/Declude

2004-07-04 Thread Douglas Cohn
: [Declude.Virus] F-Prot Version 3.15 w/Declude I don't log out of the email server. I simply lock the console. The Updater will still run and the system still requires a password to get back to the console. Is there a good reason not to do it this way?? ~Joe - Original Message - From: Douglas

RE: [Declude.Virus] OT- Anyone know about this latest attack reported by CNN?

2004-06-25 Thread Douglas Cohn
http://www.microsoft.com/security/incident/download_ject.mspx -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Markus Gufler Sent: Friday, June 25, 2004 10:35 AM To: [EMAIL PROTECTED] Subject: RE: [Declude.Virus] OT- Anyone know about this latest attack

RE: [Declude.Virus] OT- Anyone know about this latest attack reported by CNN?

2004-06-25 Thread Douglas Cohn
UNTIL NOW?? You are infected now? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Markus Gufler Sent: Friday, June 25, 2004 10:35 AM To: [EMAIL PROTECTED] Subject: RE: [Declude.Virus] OT- Anyone know about this latest attack reported by CNN? OT-

RE: [Declude.Virus] OT- Anyone know about this latest attack reported by CNN?

2004-06-25 Thread Douglas Cohn
http://www.microsoft.com/security/incident/download_ject.mspx -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] Sent: Friday, June 25, 2004 10:11 AM To: [EMAIL PROTECTED] Subject: Re: [Declude.Virus] OT- Anyone know about this latest

RE: [Declude.Virus] Virus reports not showing virus

2004-06-24 Thread Douglas Cohn
Thanks Had a feeling when I pasted it but it was too late already. Must have added it when I changed it to fpcmd. Thanks I removed it just now. DC -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry Sent: Thursday, June 24, 2004 8:02 AM

[Declude.Virus] Virus reports not showing virus

2004-06-23 Thread Douglas Cohn
I am having some odd reports from Virusloganalyser lately. It no longer shows I have any viruses just Outlook Vulnerabilities.. Previously, I believe when I was running the 16 bit Fprot (now running 32 bit) it reported viruses. Here is a snippet of my logs. I also do not understand the missing

RE: [Declude.Virus] F-Prot letting TROJ_REVOP.F thru

2004-06-18 Thread Douglas Cohn
Have you sent those caught viruses to the declude or F-prot virus traps? They may be corrupted and not viable viruses any longer. Meaning they are no longer harmful (Possibly). F-prot would surely want to see this. Go to their website and submit the samples. Doug -Original Message-

RE: [Declude.Virus] BSOD and IMail-Server reboot

2004-06-13 Thread Douglas Cohn
Tolmachoff Engineer/Consultant/Owner eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Douglas Cohn Sent: Friday, June 11, 2004 11:32 AM To: [EMAIL PROTECTED] Subject: RE: [Declude.Virus] BSOD and IMail-Server reboot

RE: [Declude.Virus] BSOD and IMail-Server reboot

2004-06-12 Thread Douglas Cohn
discussion concerning Intel OB NICs and Imail. Search the archives. Bottom line, get a solid Server designated NIC. John Tolmachoff Engineer/Consultant/Owner eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Douglas Cohn Sent: Friday, June

RE: [Declude.Virus] BSOD and IMail-Server reboot

2004-06-11 Thread Douglas Cohn
This problem has not gone away. It occurs with very high traffic only and is not related to declude. That is we tested iot without declude and it still Blue Screens when there is extremely high traffic. Imail claims that when the server has extremely high traffic you need to use a SERVER NIC in

RE: [Declude.Virus] What is Partial Vulnerability on a PDF

2004-06-05 Thread Douglas Cohn
Uuencode/Uudecode is what we used to use before the high speed world became a reality. You would type Uudecode and the file name and path. If I remember as long as all the parts where in the same directory it would reassemble it. There are plenty of mailers that will reassemble and I really

RE: [Declude.Virus] What is Partial Vulnerability on a PDF

2004-06-05 Thread Douglas Cohn
Actually why couldn't Declude run uudecode and reassemble the file before hand, then have it scanned and determine if it is harmful or not?? DC -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Douglas Cohn Sent: Saturday, June 05, 2004 5:41 PM To: [EMAIL

RE: [Declude.Virus] Notification for forwarded messages

2004-05-29 Thread Douglas Cohn
but it requires 2 IP addresses to work. Is that what you have done or are you running one on a non standard port? Thanx -Original Message- From: Douglas Cohn [EMAIL PROTECTED] Date: Fri, 28 May 2004 12:28:22 To:[EMAIL PROTECTED] Subject: RE: [Declude.Virus] Notification for forwarded messages We

RE: [Declude.Virus] Notification for forwarded messages

2004-05-28 Thread Douglas Cohn
We do this as well using Vbscript only. It does exactly what you do. Anytime a virus is quarantined an email with a link to the file is sent to the recepient with a warning of the dangers involved in retrieving the files. We then delete everything over 5 days old to avoid getting too many files

RE: [Declude.Virus] Good list of SKIPIFVIRUSNAMEHAS

2004-05-26 Thread Douglas Cohn
What is the link to the manual again. I misplaced it. And what is the most current Beta and where can I obtain. Most current interim? Sorry bout this -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry Sent: Tuesday, May 25, 2004 9:05 PM

RE: [Declude.Virus] Good list of SKIPIFVIRUSNAMEHAS

2004-05-26 Thread Douglas Cohn
PROTECTED] On Behalf Of Douglas Cohn Sent: Wednesday, May 26, 2004 12:02 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.Virus] Good list of SKIPIFVIRUSNAMEHAS What is the link to the manual again. I misplaced it. And what is the most current Beta and where can I obtain. Most current interim? Sorry

RE: Possible Spam: [Declude.Virus] OT - Need IP from MAC address

2004-05-23 Thread Douglas Cohn
Why do you want to know the IP? Do you have a router on the network? Or a switch that you can manage. If you have any Cisco hardware on the network you can easily determine the IP from an arp address. If it is a small network just show ip arp Or show ip arp xxx.xxx.xxx.xxx Will give all

RE: [Declude.Virus] TOT TCP/IP Protocol driver service

2004-05-21 Thread Douglas Cohn
-Original Message- From: [EMAIL PROTECTED] [mailto:Declude.Virus- [EMAIL PROTECTED] On Behalf Of Douglas Cohn Sent: Friday, May 21, 2004 1:39 AM To: [EMAIL PROTECTED] Subject: RE: [Declude.Virus] TOT TCP/IP Protocol driver service I also have the 2002 Admin pack. Back then we paid

RE: [Declude.Virus] TOT TCP/IP Protocol driver service

2004-05-20 Thread Douglas Cohn
I also have the 2002 Admin pack. Back then we paid $999 for it. I have saved several shared servers with it more than covering the $999 but now it is closer to $5000 I believe. It may be worth it as well. All their products are great. Go to the freeware site sysinternals.com and get all their

RE: [Declude.Virus] RE Mass mailing maybe new virus

2004-05-11 Thread Douglas Cohn
Thanks I was thinking about adding the rule as well but also assumed that any legit mail to yahoo would be blocked and stopped myself. Too bad the powers that be here are not buying JUNK Mail. DC From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of MattSent: Tuesday, May 11,

RE: [Declude.Virus] RE Mass mailing maybe new virus

2004-05-11 Thread Douglas Cohn
I love decludeJunkmail as I have it on my personal domain on a sharedmail serverthat an ISP friend/client allows me to use. I must now use a local spam product on my personal mail and everyone else fends for themselves on the company domain which works for some but it is still local

RE: [Declude.Virus] problems with the F-Prot updater

2004-05-06 Thread Douglas Cohn
I have seen this as well. You could write a batch file that tests for the website first and if it resolves correctly runs the updater. If not it loops through and delays 10 minutes and then tries again. I have been planning to do just that myself. I run the updates every hour so I am more

RE: [Declude.Virus] blocking auto reply messages

2004-05-06 Thread Douglas Cohn
Help me out please. Why are we looking for the beginning of an IP address? Also my understanding of these filters is to eliminate sending emails to users that were not the original senders because of a forged virus. Is that correct??? If so wouldn't adding the Virus name to the declude forged

RE: CBL:RE: [Declude.Virus] .CPL file blocked

2004-04-29 Thread Douglas Cohn
HUH??? The latest released version is 1.75; the latest beta is 1.75. You meant Beta is 1.79 correct??? Also what happened to that emergency list you created. I joined it or tried to but was never confirmed. DC -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On

RE: [Declude.Virus] .CPL file blocked

2004-04-29 Thread Douglas Cohn
To: [EMAIL PROTECTED] Subject: Re: [Declude.Virus] .CPL file blocked Douglas, Can I ask why you block MS Access files (MDB) and not other Office products that can contain macros? John Olden - Systems Administrator Champaign Park District - Original Message - From: Douglas Cohn [EMAIL

RE: [Declude.Virus] Mcafee NetShield Problems

2004-04-29 Thread Douglas Cohn
Contact Microsoft. They can analyze the dumps for you. 64K dumps should be fine. DC -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Scott Hahn Sent: Wednesday, April 28, 2004 3:24 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.Virus] Mcafee NetShield

RE: [Declude.Virus] Mcafee NetShield Problems

2004-04-29 Thread Douglas Cohn
Why the interest in the second power supply??? Is it used or just laying in wait for the first one to die as in 99% of the RDP systems currently in production? Don't get me wrong. You should always have at least one spare power supply handy and if money is not an issue or the server is critical

RE: [Declude.Virus] .CPL file blocked

2004-04-27 Thread Douglas Cohn
This is the most recent list I was given. (from this list). It has a few more than Johns. BANEXT ad BANEXT adp BANEXT asp BANEXT bas BANEXT bat BANEXT CEO BANEXT chm BANEXT cmd BANEXT com BANEXT cpl

RE: [Declude.Virus] [OT} Anti-Virus - Client Side Suggestion

2004-04-26 Thread Douglas Cohn
We have also used Norton Corporate for at least 3 - 4 years now with no problems. I remember a few years back when we had a mess in our network (In 1999 fast growing pains) and a dedicated customer installed Norton and we had installed it for our shared. We saw his Norton in the Server MMC

RE: [Declude.Virus] MAXATONCE Switch

2004-04-17 Thread Douglas Cohn
Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Douglas Cohn Sent: Friday, April 16, 2004 11:36 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.Virus] MAXATONCE Switch Scott Why does your sample F-prot command line use the 16 bit scanner instead of the 32 bit one? Do you

RE: [Declude.Virus] MAXATONCE Switch

2004-04-17 Thread Douglas Cohn
I am also using /SERVER and /ARCHIVE=5 I have no idea if it is doing anything worthwhile but it has not created any false positives so I leave it in. I actually got the config from users on this list. I am being cautious regarding Viruscode 8 and excel and word files. So far so good.

RE: [Declude.Virus] MAXATONCE Switch

2004-04-16 Thread Douglas Cohn
Scott Why does your sample F-prot command line use the 16 bit scanner instead of the 32 bit one? Do you have a recommended command line for FPcmd and do you recommend that we always use it instead of F-prot.exe. I have not patched my Imail server with the current Microsft patches because I am

RE: [Declude.Virus] MAXATONCE Switch

2004-04-16 Thread Douglas Cohn
version :) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Douglas Cohn Sent: Friday, April 16, 2004 11:36 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.Virus] MAXATONCE Switch Scott Why does your sample F-prot command line use the 16 bit scanner instead

RE: [Declude.Virus] getting this in my logfile

2004-04-13 Thread Douglas Cohn
On this same subject. If you are using Fprot and have configured it exactly as you recommend on the WEBSITE will an Excel file with a dangerous Macro be detected? IE is there a middle ground with FPROT? I currently have /SERVER in my commandline and Viruscode 8 in my config (see below) because

RE: [Declude.Virus] netsky p ?

2004-03-26 Thread Douglas Cohn
Is there any thought about changing this? IE removing the attachment and passing the email through. Or is the case I gave very rare?? IE a legitimate email with the Quarantined Attachment.txt. And if not blocked it will come through, I am aware as I do not block them. Why add Quarantined

[Declude.Virus] Could not find parse string Infection: in report.txt

2004-03-20 Thread Douglas Cohn
Can anyone tell me what this means. I included the later lines as well. Running Declude standard Diagnostics ON (Declude v1.78i27). Fprot 3.14e with this command line SCANFILEC:\Progra~1\FSI\F-Prot\F-Prot.exe /TYPE /SILENT /NOMEM /ARCHIVE=5 /NOFLOPPY /NOBOOT /DUMB /SERVER

RE: [Declude.Virus] Could not find parse string Infection: in report.txt

2004-03-20 Thread Douglas Cohn
Thanks for the immediate reply G Will it treat the message like a virus. IE not forward it to the recipient? Love your company and product. You should start a consulting company and teach corporations how to treat customers. DC -Original Message- From: [EMAIL PROTECTED]

Re: [Declude.Virus] whitelisting?

2004-03-19 Thread Douglas Cohn
I agree with your customer. Why do you ban all zip files? How are they expected to conduct business if their business requires transferring files? My customers required that I create a way for them to retrieve the infected files for them. You could simply do that. Allow the customer to

[Declude.Virus] More details on Virus.cfg and F-prot 3.14E

2004-03-18 Thread Douglas Cohn
I have been following the recent threads but I have not seen a definitive answer. Most likely because it is still so new (F-prot 3.14E). Some help would be greatly appreciated. What about the /SERVER setting? Any advantage to using it. I am also a bit confused about the Viruscode settings. I

RE: [Declude.Virus] F-prot 3.14e

2004-03-17 Thread Douglas Cohn
: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Douglas Cohn Sent: Tuesday, March 16, 2004 8:38 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.Virus] F-prot 3.14e Being new to Declude/F-prot I was testing an install. Running W2K I updated F-Prot from 3.14C to 3.14E and restarted everything

RE: [Declude.Virus] F-prot 3.14e

2004-03-17 Thread Douglas Cohn
: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Douglas Cohn Sent: Tuesday, March 16, 2004 8:38 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.Virus] F-prot 3.14e Being new to Declude/F-prot I was testing an install. Running W2K I updated F-Prot from 3.14C to 3.14E and restarted everything

RE: [Declude.Virus] F-prot 3.14e

2004-03-16 Thread Douglas Cohn
Being new to Declude/F-prot I was testing an install. Running W2K I updated F-Prot from 3.14C to 3.14E and restarted everything without rebooting. Seems to be working fine on my desktop. Is this safe on my mail server as well? I am not very comfortable rebooting that often. Thanks DC

[Declude.Virus] sample configs

2004-03-13 Thread Douglas Cohn
Are there any sample configs around to get some ideas on what works well. I just setup Declude AV and it worked right out of the box. Nice feeling. Thanks for the great product. Doug --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude

RE: [Declude.Virus] Encrypted password

2004-03-13 Thread Douglas Cohn
I read that there are two products capable of this. Aladdin and Network Box or something like that. http://www.ealaddin.com/news/2004/esafe/Bagel_virus.asp and another http://www.tmcnet.com/usubmit/2004/Mar/1024780.htm -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL