Re: [Declude.Virus] AVAFTERJM

2006-02-02 Thread Matt
Thanks for the clarificaiton. Matt David Franco-Rocha [ Declude ] wrote: When scanning for viruses after JunkMail through use of the above directive, the following rule applies: All email will continue to be scanned for viruses EXCEPT those emails having a final JunkMail action of: HOLD

[Declude.Virus] AVAFTERJM

2006-02-02 Thread David Franco-Rocha [ Declude ]
When scanning for viruses after JunkMail through use of the above directive, the following rule applies: All email will continue to be scanned for viruses EXCEPT those emails having a final JunkMail action of: HOLD DELETE David Franco-Rocha Declude Technical / Engineering --- [This E-mail w

Re: [Declude.Virus] AVAFTERJM -> was Feature request: DELETEVIRUSNAME

2006-01-26 Thread Matt
This is a big conundrum, and it would save me an unbelievable amount of money to change this behavior. I capture about 10% to 20% of spam to E-mail accounts and delete the rest.  If I turn AVAFTERJM ON, I would end up with viruses all over my capture accounts and that just can't happen because

Re: [Declude.Virus] AVAFTERJM ?

2005-09-23 Thread Matt
David, I believe so. The Q* file contains the path to the D* file, and that is always under the spool unless you have changed the Q* file to point elsewhere. Also, the best way to embed something in the headers that can't be forged would be to do it above the Received lines and then code a

Re[2]: [Declude.Virus] AVAFTERJM ?

2005-09-23 Thread David Sullivan
Matt, Is it possible to call declude.exe with the path to another folder containing the Q/D? M> The one issue with calling declude.exe directly is that you don't want M> the Q*.smd file to be in the spool, otherwise IMail's Queue Manager can M> steal it, though that would only cause an error in t

Re: [Declude.Virus] AVAFTERJM ?

2005-09-23 Thread Matt
David, The one issue with calling declude.exe directly is that you don't want the Q*.smd file to be in the spool, otherwise IMail's Queue Manager can steal it, though that would only cause an error in this case and the message would be delivered. I would recommend moving the D*.smd file back

Re[2]: [Declude.Virus] AVAFTERJM ?

2005-09-23 Thread David Sullivan
Friday, September 23, 2005, 12:17:32 PM, you wrote: M> You could write something to the message that Declude JunkMail was set M> to whitelist, and then copy the D*.smd file to the spool and the Q*.smd That's a great idea. Something innocuous in the headers as a whitelist key. Rather than just put

Re: [Declude.Virus] AVAFTERJM ?

2005-09-23 Thread Matt
David, You could write something to the message that Declude JunkMail was set to whitelist, and then copy the D*.smd file to the spool and the Q*.smd file to the overflow directory (or the proc directory in 3.0+). This would cause the message to be scanned by both JunkMail and Virus, however

Re[2]: [Declude.Virus] AVAFTERJM ?

2005-09-23 Thread David Sullivan
Thursday, September 22, 2005, 9:01:37 AM, you wrote: Dsic> "AVAFTERJM ON" goes in the virus.cfg file and it makes AV run after JM as Dsic> you suspected. Several of us run this mode for the reason you cited. The Dsic> only deal you have to remember is if something is trapped by JM and you put D

RE: [Declude.Virus] AVAFTERJM ?

2005-09-22 Thread Panda Consulting S.A. Luis Alberto Arango
-spam tests   Luis Arango   From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Marcel SangersSent: Jueves, 22 de Septiembre de 2005 03:16 a.m.To: Declude.Virus@declude.comSubject: [Declude.Virus] AVAFTERJM ? Hello all, We make use of the latest Declude ve

Re: [Declude.Virus] AVAFTERJM ?

2005-09-22 Thread Darrell \([EMAIL PROTECTED])
Marcel, "AVAFTERJM ON" goes in the virus.cfg file and it makes AV run after JM as you suspected. Several of us run this mode for the reason you cited. The only deal you have to remember is if something is trapped by JM and you put it back in the queue it will not be virus scanned. Darrell

[Declude.Virus] AVAFTERJM ?

2005-09-22 Thread Marcel Sangers
Title: AVAFTERJM ? Hello all, We make use of the latest Declude version (spam+virus) Pro. What does the AVAFTERJM option do? Antivirus scanning after Junkmail I suppose? What is the default? First scanning viruses followed by scanning for spam? Due to the large amounts of spam I would sugge

RE: [Declude.Virus] AVAFTERJM not working

2004-12-20 Thread Mark E. Smith
Title: Message Ah ha!   Note to Declude staff -- update the documentation. :) From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Colbeck, AndrewSent: Monday, December 20, 2004 12:17 PMTo: [EMAIL PROTECTED]Subject: RE: [Declude.Virus] AVAFTERJM not working

RE: [Declude.Virus] AVAFTERJM not working

2004-12-20 Thread Colbeck, Andrew
ssage-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mark E. SmithSent: Monday, December 20, 2004 8:37 AMTo: [EMAIL PROTECTED]Subject: [Declude.Virus] AVAFTERJM not working I've been working with Darrell from Invariant systems using their log utility. We&#

[Declude.Virus] AVAFTERJM not working

2004-12-20 Thread Mark E. Smith
I've been working with Darrell from Invariant systems using their log utility. We've been running AVAFTERJM based on the following logic:   We delete about 50% of email as spam via Junkmail (gateway system only). If we delete 50% of the email then we can reduce the load on Declude/FProt AV

Re: [Declude.Virus] AVAFTERJM switch

2003-07-28 Thread R. Scott Perry
When this switch is used in the virus.cfg file, should JM not write its results to the headers and then send it on to AV? The headers are added to the E-mail after all the Declude programs are done handling the E-mail (so that the file only needs to be updated once), so the Declude JunkMail head

[Declude.Virus] AVAFTERJM switch

2003-07-28 Thread Tandem Group
When this switch is used in the virus.cfg file, should JM not write its results to the headers and then send it on to AV? Erik Erik Hjelholt, Managing Director Alberni-dot-Net, a div. of Tandem Security Inc. 4716 Roger St., Port Alberni, BC V9Y 3Z2 Phone: 250-720-8110 - Fax: 250-723-09