AW: [Declude.Virus] RE: [Declude.JunkMail] 4.3.46
Hello, our declude is crashing, no matter if I try 4.3.46 or 4.3.64. It looks like a special offer with about 1400 To Addresses. The Header looks not very strange: Received: from moutng.kundenserver.de [212.227.126.186] by xx-GmbH.de with ESMTP (SMTPD-8.22) id A2ED0348; Fri, 19 Oct 2007 19:01:33 +0200 Received: from ics-id.de (p578b6f85.dip0.t-ipconnect.de [87.139.111.133]) by mrelayeu.kundenserver.de (node=mrelayeu2) with ESMTP (Nemesis) id 0MKwtQ-1Iitka1tTt-00035s; Fri, 19 Oct 2007 17:41:54 +0200 Received: from mail pickup service by ics-id.de with Microsoft SMTPSVC; Fri, 19 Oct 2007 16:45:57 +0200 Return-Path: [EMAIL PROTECTED] Delivery-Date: Fri, 19 Oct 2007 16:36:56 +0200 Received-SPF: pass (mxeu24: domain of srs.kundenserver.de designates 212.227.126.187 as permitted sender) client-ip=212.227.126.187; [EMAIL PROTECTED]; helo=moutng.kundenserver.de; Return-Path: [EMAIL PROTECTED] Delivery-Date: Fri, 19 Oct 2007 10:39:31 +0200 Received-SPF: none (mxeu18: 12.107.122.224 is neither permitted nor denied by domain of europastar.com) client-ip=12.107.122.224; [EMAIL PROTECTED]; helo=vnu001glbmxh01.enterprisenet.org; Message-ID: [EMAIL PROTECTED] X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0 Content-class: urn:content-classes:message Content-Transfer-Encoding: 7bit MIME-Version: 1.0 Content-Type: multipart/related; type=multipart/alternative; boundary=_=_NextPart_001_01C8122B.6A62C395 Subject: =?utf-8?Q?TR:_EUROTEC_NR_355_=286/07=29_-_=C3=A4ussert_attraktives_Sonder?= =?utf-8?Q?angebot!?= Date: Fri, 19 Oct 2007 16:45:57 +0200 X-Mailer: Microsoft CDO for Exchange 2000 X-MS-Has-Attach: yes X-MS-TNEF-Correlator: Thread-Topic: =?utf-8?Q?EUROTEC_NR_355_=286/07=29_-_=C3=A4ussert_attraktives_Sonderange?= =?utf-8?Q?bot!?= Thread-Index: AcgRkreGKI2IQ6TCQ3W3v9rY5iSFDAAAc3swACTqwAA= From: Bailly-Henguely, Jocelyne [EMAIL PROTECTED] To: [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED], And this repeated till line 1459. It's 164 KB in size, with mid nothing in the logfile. Eventlog says stopped unexpectedly :) ? Alex Siller AG, Wannenaeckerstrasse 43, 74078 Heilbronn Vorstand: Prof. H.-F. Siller (Vorsitzender), Joern Buelow, Ralf Michi Aufsichtsratsvorsitzender: Armin Sohler Reg. Gericht Stuttgart, HRB 107707, Ust-Id Nr. DE145782955 --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
Re: [Declude.Virus] RE: [Declude.JunkMail] 4.3.46
Please give me a call at 1-866-332-5833 ext. 7008. If you have any further questions, please do not hesitate to contact me either by email or call Toll free 1-866-332-5833 Ext.7008 Linda Pagillo Technical Support Engineer | Declude Your Email Security is our business Office: 978.499.2933 x7008 Toll Free: 1-866.332.5833 x7008 Fax: 978.334.0700 Email: [EMAIL PROTECTED] - Original Message - From: Hirthe, Alexander [EMAIL PROTECTED] To: declude.virus@declude.com Sent: Friday, October 19, 2007 12:08 PM Subject: AW: [Declude.Virus] RE: [Declude.JunkMail] 4.3.46 Hello, our declude is crashing, no matter if I try 4.3.46 or 4.3.64. It looks like a special offer with about 1400 To Addresses. The Header looks not very strange: Received: from moutng.kundenserver.de [212.227.126.186] by xx-GmbH.de with ESMTP (SMTPD-8.22) id A2ED0348; Fri, 19 Oct 2007 19:01:33 +0200 Received: from ics-id.de (p578b6f85.dip0.t-ipconnect.de [87.139.111.133]) by mrelayeu.kundenserver.de (node=mrelayeu2) with ESMTP (Nemesis) id 0MKwtQ-1Iitka1tTt-00035s; Fri, 19 Oct 2007 17:41:54 +0200 Received: from mail pickup service by ics-id.de with Microsoft SMTPSVC; Fri, 19 Oct 2007 16:45:57 +0200 Return-Path: [EMAIL PROTECTED] Delivery-Date: Fri, 19 Oct 2007 16:36:56 +0200 Received-SPF: pass (mxeu24: domain of srs.kundenserver.de designates 212.227.126.187 as permitted sender) client-ip=212.227.126.187; [EMAIL PROTECTED]; helo=moutng.kundenserver.de; Return-Path: [EMAIL PROTECTED] Delivery-Date: Fri, 19 Oct 2007 10:39:31 +0200 Received-SPF: none (mxeu18: 12.107.122.224 is neither permitted nor denied by domain of europastar.com) client-ip=12.107.122.224; [EMAIL PROTECTED]; helo=vnu001glbmxh01.enterprisenet.org; Message-ID: [EMAIL PROTECTED] X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0 Content-class: urn:content-classes:message Content-Transfer-Encoding: 7bit MIME-Version: 1.0 Content-Type: multipart/related; type=multipart/alternative; boundary=_=_NextPart_001_01C8122B.6A62C395 Subject: =?utf-8?Q?TR:_EUROTEC_NR_355_=286/07=29_-_=C3=A4ussert_attraktives_Sonder?= =?utf-8?Q?angebot!?= Date: Fri, 19 Oct 2007 16:45:57 +0200 X-Mailer: Microsoft CDO for Exchange 2000 X-MS-Has-Attach: yes X-MS-TNEF-Correlator: Thread-Topic: =?utf-8?Q?EUROTEC_NR_355_=286/07=29_-_=C3=A4ussert_attraktives_Sonderange?= =?utf-8?Q?bot!?= Thread-Index: AcgRkreGKI2IQ6TCQ3W3v9rY5iSFDAAAc3swACTqwAA= From: Bailly-Henguely, Jocelyne [EMAIL PROTECTED] To: [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED], And this repeated till line 1459. It's 164 KB in size, with mid nothing in the logfile. Eventlog says stopped unexpectedly :) ? Alex Siller AG, Wannenaeckerstrasse 43, 74078 Heilbronn Vorstand: Prof. H.-F. Siller (Vorsitzender), Joern Buelow, Ralf Michi Aufsichtsratsvorsitzender: Armin Sohler Reg. Gericht Stuttgart, HRB 107707, Ust-Id Nr. DE145782955 --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] RE: [Declude.JunkMail] 4.3.46
Put the LOGLEVEL on DEBUG and capture a crash, send it to [EMAIL PROTECTED] looks like it could be a buffer overflow issue. Also if there is a declude.gp1 file in the c:\ send that as well. Thanks David -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Hirthe, Alexander Sent: Friday, October 19, 2007 1:09 PM To: declude.virus@declude.com Subject: AW: [Declude.Virus] RE: [Declude.JunkMail] 4.3.46 Hello, our declude is crashing, no matter if I try 4.3.46 or 4.3.64. It looks like a special offer with about 1400 To Addresses. The Header looks not very strange: Received: from moutng.kundenserver.de [212.227.126.186] by xx-GmbH.de with ESMTP (SMTPD-8.22) id A2ED0348; Fri, 19 Oct 2007 19:01:33 +0200 Received: from ics-id.de (p578b6f85.dip0.t-ipconnect.de [87.139.111.133]) by mrelayeu.kundenserver.de (node=mrelayeu2) with ESMTP (Nemesis) id 0MKwtQ-1Iitka1tTt-00035s; Fri, 19 Oct 2007 17:41:54 +0200 Received: from mail pickup service by ics-id.de with Microsoft SMTPSVC; Fri, 19 Oct 2007 16:45:57 +0200 Return-Path: [EMAIL PROTECTED] Delivery-Date: Fri, 19 Oct 2007 16:36:56 +0200 Received-SPF: pass (mxeu24: domain of srs.kundenserver.de designates 212.227.126.187 as permitted sender) client-ip=212.227.126.187; [EMAIL PROTECTED]; helo=moutng.kundenserver.de; Return-Path: [EMAIL PROTECTED] Delivery-Date: Fri, 19 Oct 2007 10:39:31 +0200 Received-SPF: none (mxeu18: 12.107.122.224 is neither permitted nor denied by domain of europastar.com) client-ip=12.107.122.224; [EMAIL PROTECTED]; helo=vnu001glbmxh01.enterprisenet.org; Message-ID: [EMAIL PROTECTED] X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0 Content-class: urn:content-classes:message Content-Transfer-Encoding: 7bit MIME-Version: 1.0 Content-Type: multipart/related; type=multipart/alternative; boundary=_=_NextPart_001_01C8122B.6A62C395 Subject: =?utf-8?Q?TR:_EUROTEC_NR_355_=286/07=29_-_=C3=A4ussert_attraktives_Sonder?= =?utf-8?Q?angebot!?= Date: Fri, 19 Oct 2007 16:45:57 +0200 X-Mailer: Microsoft CDO for Exchange 2000 X-MS-Has-Attach: yes X-MS-TNEF-Correlator: Thread-Topic: =?utf-8?Q?EUROTEC_NR_355_=286/07=29_-_=C3=A4ussert_attraktives_Sonderange?= =?utf-8?Q?bot!?= Thread-Index: AcgRkreGKI2IQ6TCQ3W3v9rY5iSFDAAAc3swACTqwAA= From: Bailly-Henguely, Jocelyne [EMAIL PROTECTED] To: [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED], And this repeated till line 1459. It's 164 KB in size, with mid nothing in the logfile. Eventlog says stopped unexpectedly :) ? Alex Siller AG, Wannenaeckerstrasse 43, 74078 Heilbronn Vorstand: Prof. H.-F. Siller (Vorsitzender), Joern Buelow, Ralf Michi Aufsichtsratsvorsitzender: Armin Sohler Reg. Gericht Stuttgart, HRB 107707, Ust-Id Nr. DE145782955 --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] RE: [Declude.JunkMail] 4.3.46
My apologies I was lysdexic Latest Full Release 4.3.46 Latest Interim 4.3.64 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Andy Schmidt Sent: Thursday, October 18, 2007 3:56 PM To: [EMAIL PROTECTED]; declude.virus@declude.com Subject: [Declude.Virus] RE: [Declude.JunkMail] 4.3.46 Dave, Lots of confusion here: a) the subject refers to 4.3.46 - which shows up on my customer screen as the latest RELEASE b) however, that's less than the interim 4.3.57 that is shown on my customer screen? c) the body of your email refers to 4.3.64 - which would make more sense. Except, THAT number is not visible ANYWHERE on my customer screen, neither as a release NOR as an interim version number? Best Regards, Andy -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Barker Sent: Tuesday, October 16, 2007 2:32 PM To: [EMAIL PROTECTED]; declude.virus@declude.com Subject: [Declude.JunkMail] 4.3.46 4.3.64 available, we have made some changes to address the vulnerability if you would like to test this - it can be downloaded from the interim location. David Barker VP Operations Declude Your Email security is our business 978.499.2933 x 7007 office 978.988.1311 fax [EMAIL PROTECTED] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
[Declude.Virus] RE: [Declude.JunkMail] 4.3.46
Dave, Lots of confusion here: a) the subject refers to 4.3.46 - which shows up on my customer screen as the latest RELEASE b) however, that's less than the interim 4.3.57 that is shown on my customer screen? c) the body of your email refers to 4.3.64 - which would make more sense. Except, THAT number is not visible ANYWHERE on my customer screen, neither as a release NOR as an interim version number? Best Regards, Andy -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Barker Sent: Tuesday, October 16, 2007 2:32 PM To: [EMAIL PROTECTED]; declude.virus@declude.com Subject: [Declude.JunkMail] 4.3.46 4.3.64 available, we have made some changes to address the vulnerability if you would like to test this - it can be downloaded from the interim location. David Barker VP Operations Declude Your Email security is our business 978.499.2933 x 7007 office 978.988.1311 fax [EMAIL PROTECTED] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] RE: [Declude.JunkMail] 4.3.46
The dyslexic atheist says, There is no dog. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Barker Sent: Thursday, October 18, 2007 3:07 PM To: declude.virus@declude.com; [EMAIL PROTECTED] Subject: RE: [Declude.Virus] RE: [Declude.JunkMail] 4.3.46 My apologies I was lysdexic Latest Full Release 4.3.46 Latest Interim 4.3.64 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Andy Schmidt Sent: Thursday, October 18, 2007 3:56 PM To: [EMAIL PROTECTED]; declude.virus@declude.com Subject: [Declude.Virus] RE: [Declude.JunkMail] 4.3.46 Dave, Lots of confusion here: a) the subject refers to 4.3.46 - which shows up on my customer screen as the latest RELEASE b) however, that's less than the interim 4.3.57 that is shown on my customer screen? c) the body of your email refers to 4.3.64 - which would make more sense. Except, THAT number is not visible ANYWHERE on my customer screen, neither as a release NOR as an interim version number? Best Regards, Andy -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Barker Sent: Tuesday, October 16, 2007 2:32 PM To: [EMAIL PROTECTED]; declude.virus@declude.com Subject: [Declude.JunkMail] 4.3.46 4.3.64 available, we have made some changes to address the vulnerability if you would like to test this - it can be downloaded from the interim location. David Barker VP Operations Declude Your Email security is our business 978.499.2933 x 7007 office 978.988.1311 fax [EMAIL PROTECTED] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] 4.3.46
Dave, Lots of confusion here: a) the subject refers to 4.3.46 - which shows up on my customer screen as the latest RELEASE b) however, that's less than the interim 4.3.57 that is shown on my customer screen? c) the body of your email refers to 4.3.64 - which would make more sense. Except, THAT number is not visible ANYWHERE on my customer screen, neither as a release NOR as an interim version number? Best Regards, Andy -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Barker Sent: Tuesday, October 16, 2007 2:32 PM To: [EMAIL PROTECTED]; declude.virus@declude.com Subject: [Declude.JunkMail] 4.3.46 4.3.64 available, we have made some changes to address the vulnerability if you would like to test this - it can be downloaded from the interim location. David Barker VP Operations Declude Your Email security is our business 978.499.2933 x 7007 office 978.988.1311 fax [EMAIL PROTECTED] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] RE: [Declude.JunkMail] 4.3.46
My apologies I was lysdexic Latest Full Release 4.3.46 Latest Interim 4.3.64 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Andy Schmidt Sent: Thursday, October 18, 2007 3:56 PM To: [EMAIL PROTECTED]; declude.virus@declude.com Subject: [Declude.Virus] RE: [Declude.JunkMail] 4.3.46 Dave, Lots of confusion here: a) the subject refers to 4.3.46 - which shows up on my customer screen as the latest RELEASE b) however, that's less than the interim 4.3.57 that is shown on my customer screen? c) the body of your email refers to 4.3.64 - which would make more sense. Except, THAT number is not visible ANYWHERE on my customer screen, neither as a release NOR as an interim version number? Best Regards, Andy -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Barker Sent: Tuesday, October 16, 2007 2:32 PM To: [EMAIL PROTECTED]; declude.virus@declude.com Subject: [Declude.JunkMail] 4.3.46 4.3.64 available, we have made some changes to address the vulnerability if you would like to test this - it can be downloaded from the interim location. David Barker VP Operations Declude Your Email security is our business 978.499.2933 x 7007 office 978.988.1311 fax [EMAIL PROTECTED] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] 4.3.46
4.3.64 available, we have made some changes to address the vulnerability if you would like to test this - it can be downloaded from the interim location. David Barker VP Operations Declude Your Email security is our business 978.499.2933 x 7007 office 978.988.1311 fax [EMAIL PROTECTED] -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darrell ([EMAIL PROTECTED]) Sent: Monday, October 08, 2007 4:02 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] noticed problem after upgrade to beta Herb, There were a lot of posts on this late last week on the forum. Declude is working on the fix. -- Check out http://www.invariantsystems.com for utilities for Declude, Imail, mxGuard, and ORF. IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG Integration, and Log Parsers. Herb Guenther wrote: Hi All; We have been experiencing the same declude shutdown errors when running declude for smartermail that some of you have been seeing. On Friday I upgraded to the beta version as had been suggested. We had some customers who were not seeing some incoming messages. Declude was tripping on a couple vulnerabilities (see below). I turned off those tests, and have since went back to the production version. Did anyone else see this? There were no attachments in the message. 10/08/2007 07:06:40.687 20122895 Vulnerability flags = 4 10/08/2007 07:06:40.687 20122895 Outlook 'MIME segment in MIME Postamble' vulnerability in line 21 10/08/2007 07:06:40.687 20122895 Outlook 'MIME segment in MIME Postamble' vulnerability in line 24 10/08/2007 07:06:40.687 20122895 Outlook 'MIME segment in MIME Postamble' vulnerability in line 25 10/08/2007 07:06:40.687 20122895 Outlook 'MIME segment in MIME Postamble' vulnerability in line 29 10/08/2007 07:06:40.687 20122895 Outlook 'MIME segment in MIME Postamble' vulnerability in line 30 10/08/2007 07:06:40.687 20122895 Outlook 'MIME segment in MIME Postamble' vulnerability in line 36 10/08/2007 07:06:40.687 20122895 Outlook 'MIME segment in MIME Postamble' vulnerability in line 37 10/08/2007 07:06:40.687 20122895 Outlook 'MIME segment in MIME Postamble' vulnerability in line 39 10/08/2007 07:06:40.687 20122895 Deleting file with vulnerability 10/08/2007 07:06:40.687 20122895 Deleting E-mail with vulnerability! -- --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
