RE: [Declude.Virus] RAR Support - why not?
Hi Markus, > Back to the topic: If someone want I can publish the script-part who moves > the D file back to the spool folder and runs smtp32.exe with the > associated > Q-file so that it will be delivered immediatly. If you were to send me the part or publish it somewhere I would take a crack at integrating into the ASP script. I used to program so I hope I can figure it out. In any case thank you for the REQUEUE.ASP script that you did many moons ago. Goran Jovanovic The LAN Shoppe --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] RAR Support - why not?
> My log files go to a separate directory (partition if > available) and are zipped either weekly or monthly depending > on size and when there are enough they get burned to CD then deleted. As we're talking about partitions, spool folders and moving/deleting/archiving files. I've noted that setting up the spool folder as a separate NTFS-partition attached as a subfolder to the imail partition works but sometime there are some strange error messages (cant delete message, or the message is deleted but still showing up in the file explorer) Following a MS KB article this is a known issue. Stop. :-/ Markus --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] RAR Support - why not?
> I am not the authour of the ASP file it was posted previously > and I just adjusted it for my purposes. Hmmm seeing the source code it looks like I've typed this some years ago. (please use it whoever want/need it) However here are some drawbacks: 1.) Keep in mind that a message having multiple recipients will be requeued for EVERY recipient if ONE recipient of your notification click on the asp link. 2.) Try to set up your notifications as few as possible. Customers receiving 500 notifications per day are not very happy ;-) 3.) A by this script requeued message will not be delivered immediatly. The scripts moves back both Q and D file to the spool folder and Imail will deliver it at the next queue run. So it depends on your own queue run timer settings how long it will take to deliver the message to the recipients mailbox. At the moment I'm working on a more complex asp script that - in conjunction to a MSSQL database and Pete McNeils MDLP - sends out notifications to recipients who has recieved legit messages and who also have recieved messages in a weightrange we usually review on our server (spamreview). The asp script asks for e password the first time so that any further access to the users review box is protected. In the review box there is a list of all messages hold on the server with a weight of 100 up to 150% of the hold weight (mailfrom and subject). The user can click on a message to requeue it or simply click at the bottom of a list to clean up the review box and so declare all messages as spam. The script at the moment is working but not 100% ready as I have to implement some additional functions. For example the reviewing user should have the possibility to click on a message to see the first x kB of text (eventualy decoded and without any html tags -> pure text) As it is an asp-script a component reading the D-files content and returning a decoded and tag-cleaned text content would be an excellent solution. We're working on this idea, but if someone has a bether idea or can contribute something I would be very happy. Back to the topic: If someone want I can publish the script-part who moves the D file back to the spool folder and runs smtp32.exe with the associated Q-file so that it will be delivered immediatly. Markus --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] RAR Support - why not?
My log files go to a separate directory (partition if available) and are zipped either weekly or monthly depending on size and when there are enough they get burned to CD then deleted. John Tolmachoff Engineer/Consultant/Owner eServices For You > -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] > On Behalf Of Goran Jovanovic > Sent: Friday, January 28, 2005 2:24 PM > To: Declude.Virus@declude.com > Subject: RE: [Declude.Virus] RAR Support - why not? > > Darin, > > What do you do with the old log files? Do you put them on another > machine for processing/analysis/archiving? > > If you are archiving how long do you keep the data? > > Thanx > > > > > Goran Jovanovic > The LAN Shoppe > > > > > -Original Message- > > From: [EMAIL PROTECTED] [mailto:Declude.Virus- > > [EMAIL PROTECTED] On Behalf Of Darin Cox > > Sent: Friday, January 28, 2005 5:15 PM > > To: Declude.Virus@declude.com > > Subject: Re: [Declude.Virus] RAR Support - why not? > > > > Notices only go out for banned files. We include a statement that the > > email > > will be available to be requeued for x number of days...so automatic > > processes clean it up if it's unclaimed. > > > > Regarding the space problem, are you moving logs off to another > partition > > on > > a nightly basis? Between that, automatic cleanup, and zipping old > logs > > ours > > stays pretty clean. > > > > Darin. > > > > > > - Original Message - > > From: "Andy Schmidt" <[EMAIL PROTECTED]> > > To: > > Sent: Friday, January 28, 2005 5:05 PM > > Subject: RE: [Declude.Virus] RAR Support - why not? > > > > > > Hi Goran: > > > > Oh, I've been thinking about just that. However does that mean you > hold > > all > > virus files? > > > > I don't think I could afford the additional disk space (the spool file > is > > already too big as it is.) > > > > Best Regards > > Andy > > > > -Original Message- > > From: [EMAIL PROTECTED] > > [mailto:[EMAIL PROTECTED] On Behalf Of Goran Jovanovic > > Sent: Friday, January 28, 2005 12:48 PM > > To: Declude.Virus@declude.com > > Subject: RE: [Declude.Virus] RAR Support - why not? > > > > > > Andy, > > > > Someone posted on this list a while ago a small ASP page that I am > using > > to > > requeue a banned file. I send out a bannotify.eml what has the link > back > > to > > the server with the appropriate file name. The user says I really > really > > want this file and clicks on the link. It gets requeued automatically > into > > the spool directory and it is not scanned/banned again and the user > gets > > it > > within 30 minutes. > > > > I remember that there was some discussion on the list a while ago > about > > having the users authenticate and fill in a form etc. I decided not to > > bother with that. > > > > I can send you my bannotify.eml and the asp file if you wish. Let me > know > > > > > > > > > > Goran Jovanovic > > The LAN Shoppe > > > > > > > > > -Original Message- > > > From: [EMAIL PROTECTED] [mailto:Declude.Virus- > > > [EMAIL PROTECTED] On Behalf Of Andy Schmidt > > > Sent: Thursday, January 27, 2005 6:27 PM > > > To: Declude.Virus@declude.com > > > Subject: RE: [Declude.Virus] RAR Support - why not? > > > > > > >> 1.82 will treat encrypted .RAR files the same as encrypted .ZIP > > files, > > > and will block banned file extensions in .RAR files the same way as > it > > > blocks banned file extensions in .ZIP files. << > > > > > > Beautiful! > > > > > > Now we just need McAfee to scan inside RAR files > > > > > > (Globally banning zipped .EXE files is not an option for me - I > gotta > > give > > > those customers SOME practical way to send/receive "restricted" file > > > types.) > > > > > > Best Regards > > > Andy > > > > > > > > > --- > > > [This E-mail was scanned for viruses by Declude Virus > > > (http://www.declude.com)] > > > > > > --- > > > This E-mail came from the Declude.Virus mailing list. To > unsubscribe, > > > just send an E-mail to [EMAIL PROTECTED], and > > > type "unsubscribe Declude.Virus".The a
Re: [Declude.Virus] RAR Support - why not?
Yeah...we had to do it previously due to log storage. It was a good thing we did it when there was still plenty of room as our logs doubled in size last November from a sudden increase in spam and dictionary attacks. Over a span of two days we went from 80% to 95% spam for about three weeks before it settled back down to around 90% spam...and stayed there. Darin. - Original Message - From: "Andy Schmidt" <[EMAIL PROTECTED]> To: Sent: Friday, January 28, 2005 5:28 PM Subject: RE: [Declude.Virus] RAR Support - why not? I may have to start doing that. I used to be able to keep 30 days of logs - but volume, dictionary attacks and SPAM volume are making it increasingly difficult. Best Regards Andy Schmidt H&M Systems Software, Inc. 600 East Crescent Avenue, Suite 203 Upper Saddle River, NJ 07458-1846 Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 http://www.HM-Software.com/ -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darin Cox Sent: Friday, January 28, 2005 05:15 PM To: Declude.Virus@declude.com Subject: Re: [Declude.Virus] RAR Support - why not? Notices only go out for banned files. We include a statement that the email will be available to be requeued for x number of days...so automatic processes clean it up if it's unclaimed. Regarding the space problem, are you moving logs off to another partition on a nightly basis? Between that, automatic cleanup, and zipping old logs ours stays pretty clean. Darin. - Original Message - From: "Andy Schmidt" <[EMAIL PROTECTED]> To: Sent: Friday, January 28, 2005 5:05 PM Subject: RE: [Declude.Virus] RAR Support - why not? Hi Goran: Oh, I've been thinking about just that. However does that mean you hold all virus files? I don't think I could afford the additional disk space (the spool file is already too big as it is.) Best Regards Andy -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Goran Jovanovic Sent: Friday, January 28, 2005 12:48 PM To: Declude.Virus@declude.com Subject: RE: [Declude.Virus] RAR Support - why not? Andy, Someone posted on this list a while ago a small ASP page that I am using to requeue a banned file. I send out a bannotify.eml what has the link back to the server with the appropriate file name. The user says I really really want this file and clicks on the link. It gets requeued automatically into the spool directory and it is not scanned/banned again and the user gets it within 30 minutes. I remember that there was some discussion on the list a while ago about having the users authenticate and fill in a form etc. I decided not to bother with that. I can send you my bannotify.eml and the asp file if you wish. Let me know Goran Jovanovic The LAN Shoppe > -Original Message- > From: [EMAIL PROTECTED] [mailto:Declude.Virus- > [EMAIL PROTECTED] On Behalf Of Andy Schmidt > Sent: Thursday, January 27, 2005 6:27 PM > To: Declude.Virus@declude.com > Subject: RE: [Declude.Virus] RAR Support - why not? > > >> 1.82 will treat encrypted .RAR files the same as encrypted .ZIP files, > and will block banned file extensions in .RAR files the same way as it > blocks banned file extensions in .ZIP files. << > > Beautiful! > > Now we just need McAfee to scan inside RAR files > > (Globally banning zipped .EXE files is not an option for me - I gotta give > those customers SOME practical way to send/receive "restricted" file > types.) > > Best Regards > Andy > > > --- > [This E-mail was scanned for viruses by Declude Virus > (http://www.declude.com)] > > --- > This E-mail came from the Declude.Virus mailing list. To unsubscribe, > just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.Virus".The archives can be found > at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com. --- [This E-ma
Re: [Declude.Virus] RAR Support - why not?
Hi Goran, We move them to another partition nightly, run any desired monthly reports on the 1st, zip them up on the 5th (to give time to review logs for recent days), and store for 6 months in zip format on another partition. We have plenty of disk space, so local storage hasn't been a problem yet. Our backup processes are a fairly complete disk-to-disk/production-machine-to-"warm"-spare, so the logs are available there as well. Darin. - Original Message - From: "Goran Jovanovic" <[EMAIL PROTECTED]> To: Sent: Friday, January 28, 2005 5:24 PM Subject: RE: [Declude.Virus] RAR Support - why not? Darin, What do you do with the old log files? Do you put them on another machine for processing/analysis/archiving? If you are archiving how long do you keep the data? Thanx Goran Jovanovic The LAN Shoppe > -Original Message- > From: [EMAIL PROTECTED] [mailto:Declude.Virus- > [EMAIL PROTECTED] On Behalf Of Darin Cox > Sent: Friday, January 28, 2005 5:15 PM > To: Declude.Virus@declude.com > Subject: Re: [Declude.Virus] RAR Support - why not? > > Notices only go out for banned files. We include a statement that the > email > will be available to be requeued for x number of days...so automatic > processes clean it up if it's unclaimed. > > Regarding the space problem, are you moving logs off to another partition > on > a nightly basis? Between that, automatic cleanup, and zipping old logs > ours > stays pretty clean. > > Darin. > > > - Original Message - > From: "Andy Schmidt" <[EMAIL PROTECTED]> > To: > Sent: Friday, January 28, 2005 5:05 PM > Subject: RE: [Declude.Virus] RAR Support - why not? > > > Hi Goran: > > Oh, I've been thinking about just that. However does that mean you hold > all > virus files? > > I don't think I could afford the additional disk space (the spool file is > already too big as it is.) > > Best Regards > Andy > > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Goran Jovanovic > Sent: Friday, January 28, 2005 12:48 PM > To: Declude.Virus@declude.com > Subject: RE: [Declude.Virus] RAR Support - why not? > > > Andy, > > Someone posted on this list a while ago a small ASP page that I am using > to > requeue a banned file. I send out a bannotify.eml what has the link back > to > the server with the appropriate file name. The user says I really really > want this file and clicks on the link. It gets requeued automatically into > the spool directory and it is not scanned/banned again and the user gets > it > within 30 minutes. > > I remember that there was some discussion on the list a while ago about > having the users authenticate and fill in a form etc. I decided not to > bother with that. > > I can send you my bannotify.eml and the asp file if you wish. Let me know > > > > > Goran Jovanovic > The LAN Shoppe > > > > > -Original Message- > > From: [EMAIL PROTECTED] [mailto:Declude.Virus- > > [EMAIL PROTECTED] On Behalf Of Andy Schmidt > > Sent: Thursday, January 27, 2005 6:27 PM > > To: Declude.Virus@declude.com > > Subject: RE: [Declude.Virus] RAR Support - why not? > > > > >> 1.82 will treat encrypted .RAR files the same as encrypted .ZIP > files, > > and will block banned file extensions in .RAR files the same way as it > > blocks banned file extensions in .ZIP files. << > > > > Beautiful! > > > > Now we just need McAfee to scan inside RAR files > > > > (Globally banning zipped .EXE files is not an option for me - I gotta > give > > those customers SOME practical way to send/receive "restricted" file > > types.) > > > > Best Regards > > Andy > > > > > > --- > > [This E-mail was scanned for viruses by Declude Virus > > (http://www.declude.com)] > > > > --- > > This E-mail came from the Declude.Virus mailing list. To unsubscribe, > > just send an E-mail to [EMAIL PROTECTED], and > > type "unsubscribe Declude.Virus".The archives can be found > > at http://www.mail-archive.com. > --- > [This E-mail was scanned for viruses by Declude Virus > (http://www.declude.com)] > > --- > This E-mail came from the Declude.Virus mailing list. To unsubscribe, > just > send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.Virus".The archives can be found > at http://www.mail-archive.com. > > --- > [This E-mail was scanned for viruses by Declude Virus > (http://www.declude.com)] > > --- > This E-mail ca
RE: [Declude.Virus] RAR Support - why not?
I may have to start doing that. I used to be able to keep 30 days of logs - but volume, dictionary attacks and SPAM volume are making it increasingly difficult. Best Regards Andy Schmidt H&M Systems Software, Inc. 600 East Crescent Avenue, Suite 203 Upper Saddle River, NJ 07458-1846 Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 http://www.HM-Software.com/ -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darin Cox Sent: Friday, January 28, 2005 05:15 PM To: Declude.Virus@declude.com Subject: Re: [Declude.Virus] RAR Support - why not? Notices only go out for banned files. We include a statement that the email will be available to be requeued for x number of days...so automatic processes clean it up if it's unclaimed. Regarding the space problem, are you moving logs off to another partition on a nightly basis? Between that, automatic cleanup, and zipping old logs ours stays pretty clean. Darin. - Original Message - From: "Andy Schmidt" <[EMAIL PROTECTED]> To: Sent: Friday, January 28, 2005 5:05 PM Subject: RE: [Declude.Virus] RAR Support - why not? Hi Goran: Oh, I've been thinking about just that. However does that mean you hold all virus files? I don't think I could afford the additional disk space (the spool file is already too big as it is.) Best Regards Andy -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Goran Jovanovic Sent: Friday, January 28, 2005 12:48 PM To: Declude.Virus@declude.com Subject: RE: [Declude.Virus] RAR Support - why not? Andy, Someone posted on this list a while ago a small ASP page that I am using to requeue a banned file. I send out a bannotify.eml what has the link back to the server with the appropriate file name. The user says I really really want this file and clicks on the link. It gets requeued automatically into the spool directory and it is not scanned/banned again and the user gets it within 30 minutes. I remember that there was some discussion on the list a while ago about having the users authenticate and fill in a form etc. I decided not to bother with that. I can send you my bannotify.eml and the asp file if you wish. Let me know Goran Jovanovic The LAN Shoppe > -Original Message- > From: [EMAIL PROTECTED] [mailto:Declude.Virus- > [EMAIL PROTECTED] On Behalf Of Andy Schmidt > Sent: Thursday, January 27, 2005 6:27 PM > To: Declude.Virus@declude.com > Subject: RE: [Declude.Virus] RAR Support - why not? > > >> 1.82 will treat encrypted .RAR files the same as encrypted .ZIP files, > and will block banned file extensions in .RAR files the same way as it > blocks banned file extensions in .ZIP files. << > > Beautiful! > > Now we just need McAfee to scan inside RAR files > > (Globally banning zipped .EXE files is not an option for me - I gotta give > those customers SOME practical way to send/receive "restricted" file > types.) > > Best Regards > Andy > > > --- > [This E-mail was scanned for viruses by Declude Virus > (http://www.declude.com)] > > --- > This E-mail came from the Declude.Virus mailing list. To unsubscribe, > just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.Virus".The archives can be found > at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] RAR Support - why not?
Darin, What do you do with the old log files? Do you put them on another machine for processing/analysis/archiving? If you are archiving how long do you keep the data? Thanx Goran Jovanovic The LAN Shoppe > -Original Message- > From: [EMAIL PROTECTED] [mailto:Declude.Virus- > [EMAIL PROTECTED] On Behalf Of Darin Cox > Sent: Friday, January 28, 2005 5:15 PM > To: Declude.Virus@declude.com > Subject: Re: [Declude.Virus] RAR Support - why not? > > Notices only go out for banned files. We include a statement that the > email > will be available to be requeued for x number of days...so automatic > processes clean it up if it's unclaimed. > > Regarding the space problem, are you moving logs off to another partition > on > a nightly basis? Between that, automatic cleanup, and zipping old logs > ours > stays pretty clean. > > Darin. > > > - Original Message - > From: "Andy Schmidt" <[EMAIL PROTECTED]> > To: > Sent: Friday, January 28, 2005 5:05 PM > Subject: RE: [Declude.Virus] RAR Support - why not? > > > Hi Goran: > > Oh, I've been thinking about just that. However does that mean you hold > all > virus files? > > I don't think I could afford the additional disk space (the spool file is > already too big as it is.) > > Best Regards > Andy > > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Goran Jovanovic > Sent: Friday, January 28, 2005 12:48 PM > To: Declude.Virus@declude.com > Subject: RE: [Declude.Virus] RAR Support - why not? > > > Andy, > > Someone posted on this list a while ago a small ASP page that I am using > to > requeue a banned file. I send out a bannotify.eml what has the link back > to > the server with the appropriate file name. The user says I really really > want this file and clicks on the link. It gets requeued automatically into > the spool directory and it is not scanned/banned again and the user gets > it > within 30 minutes. > > I remember that there was some discussion on the list a while ago about > having the users authenticate and fill in a form etc. I decided not to > bother with that. > > I can send you my bannotify.eml and the asp file if you wish. Let me know > > > > > Goran Jovanovic > The LAN Shoppe > > > > > -Original Message- > > From: [EMAIL PROTECTED] [mailto:Declude.Virus- > > [EMAIL PROTECTED] On Behalf Of Andy Schmidt > > Sent: Thursday, January 27, 2005 6:27 PM > > To: Declude.Virus@declude.com > > Subject: RE: [Declude.Virus] RAR Support - why not? > > > > >> 1.82 will treat encrypted .RAR files the same as encrypted .ZIP > files, > > and will block banned file extensions in .RAR files the same way as it > > blocks banned file extensions in .ZIP files. << > > > > Beautiful! > > > > Now we just need McAfee to scan inside RAR files > > > > (Globally banning zipped .EXE files is not an option for me - I gotta > give > > those customers SOME practical way to send/receive "restricted" file > > types.) > > > > Best Regards > > Andy > > > > > > --- > > [This E-mail was scanned for viruses by Declude Virus > > (http://www.declude.com)] > > > > --- > > This E-mail came from the Declude.Virus mailing list. To unsubscribe, > > just send an E-mail to [EMAIL PROTECTED], and > > type "unsubscribe Declude.Virus".The archives can be found > > at http://www.mail-archive.com. > --- > [This E-mail was scanned for viruses by Declude Virus > (http://www.declude.com)] > > --- > This E-mail came from the Declude.Virus mailing list. To unsubscribe, > just > send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.Virus".The archives can be found > at http://www.mail-archive.com. > > --- > [This E-mail was scanned for viruses by Declude Virus > (http://www.declude.com)] > > --- > This E-mail came from the Declude.Virus mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.Virus".The archives can be found > at http://www.mail-archive.com. > > --- > [This E-mail was scanned for viruses by Declude Virus > (http://www.declude.com)] > > --- > This E-mail came from the Declude.Virus mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.Virus".The archives can be found > at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] RAR Support - why not?
Hi Andy, Yes I keep all virus files VIRDIR spool\virus But I have a process that runs every night and cleans out the 6th day of files. That way I only hold 5 days of files. Right now in my spool\virus directory I have 2818 files which is 1409 mail messages. Total space of 27.7 MB. Of course your mail system is MUCH bigger than mine if memory serves me correctly. Goran Jovanovic The LAN Shoppe > -Original Message- > From: [EMAIL PROTECTED] [mailto:Declude.Virus- > [EMAIL PROTECTED] On Behalf Of Andy Schmidt > Sent: Friday, January 28, 2005 5:05 PM > To: Declude.Virus@declude.com > Subject: RE: [Declude.Virus] RAR Support - why not? > > Hi Goran: > > Oh, I've been thinking about just that. However does that mean you hold > all > virus files? > > I don't think I could afford the additional disk space (the spool file is > already too big as it is.) > > Best Regards > Andy > > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Goran Jovanovic > Sent: Friday, January 28, 2005 12:48 PM > To: Declude.Virus@declude.com > Subject: RE: [Declude.Virus] RAR Support - why not? > > > Andy, > > Someone posted on this list a while ago a small ASP page that I am using > to > requeue a banned file. I send out a bannotify.eml what has the link back > to > the server with the appropriate file name. The user says I really really > want this file and clicks on the link. It gets requeued automatically into > the spool directory and it is not scanned/banned again and the user gets > it > within 30 minutes. > > I remember that there was some discussion on the list a while ago about > having the users authenticate and fill in a form etc. I decided not to > bother with that. > > I can send you my bannotify.eml and the asp file if you wish. Let me know > > > > > Goran Jovanovic > The LAN Shoppe > > > > > -Original Message- > > From: [EMAIL PROTECTED] [mailto:Declude.Virus- > > [EMAIL PROTECTED] On Behalf Of Andy Schmidt > > Sent: Thursday, January 27, 2005 6:27 PM > > To: Declude.Virus@declude.com > > Subject: RE: [Declude.Virus] RAR Support - why not? > > > > >> 1.82 will treat encrypted .RAR files the same as encrypted .ZIP > files, > > and will block banned file extensions in .RAR files the same way as it > > blocks banned file extensions in .ZIP files. << > > > > Beautiful! > > > > Now we just need McAfee to scan inside RAR files > > > > (Globally banning zipped .EXE files is not an option for me - I gotta > give > > those customers SOME practical way to send/receive "restricted" file > > types.) > > > > Best Regards > > Andy > > > > > > --- > > [This E-mail was scanned for viruses by Declude Virus > > (http://www.declude.com)] > > > > --- > > This E-mail came from the Declude.Virus mailing list. To unsubscribe, > > just send an E-mail to [EMAIL PROTECTED], and > > type "unsubscribe Declude.Virus".The archives can be found > > at http://www.mail-archive.com. > --- > [This E-mail was scanned for viruses by Declude Virus > (http://www.declude.com)] > > --- > This E-mail came from the Declude.Virus mailing list. To unsubscribe, > just > send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.Virus".The archives can be found > at http://www.mail-archive.com. > > --- > [This E-mail was scanned for viruses by Declude Virus > (http://www.declude.com)] > > --- > This E-mail came from the Declude.Virus mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.Virus".The archives can be found > at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
Re: [Declude.Virus] RAR Support - why not?
I would be VERY interested in this "ASP" page.. Any Ideas where I can find it ? - Original Message - From: "Goran Jovanovic" <[EMAIL PROTECTED]> To: Sent: Friday, January 28, 2005 12:48 PM Subject: RE: [Declude.Virus] RAR Support - why not? Andy, Someone posted on this list a while ago a small ASP page that I am using to requeue a banned file. I send out a bannotify.eml what has the link back to the server with the appropriate file name. The user says I really really want this file and clicks on the link. It gets requeued automatically into the spool directory and it is not scanned/banned again and the user gets it within 30 minutes. I remember that there was some discussion on the list a while ago about having the users authenticate and fill in a form etc. I decided not to bother with that. I can send you my bannotify.eml and the asp file if you wish. Let me know Goran Jovanovic The LAN Shoppe -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.Virus- [EMAIL PROTECTED] On Behalf Of Andy Schmidt Sent: Thursday, January 27, 2005 6:27 PM To: Declude.Virus@declude.com Subject: RE: [Declude.Virus] RAR Support - why not? >> 1.82 will treat encrypted .RAR files the same as encrypted .ZIP files, and will block banned file extensions in .RAR files the same way as it blocks banned file extensions in .ZIP files. << Beautiful! Now we just need McAfee to scan inside RAR files (Globally banning zipped .EXE files is not an option for me - I gotta give those customers SOME practical way to send/receive "restricted" file types.) Best Regards Andy --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com. --- This email has been scanned for possible viruses by Declude Antivirus. For more information on Declude Antivirus, Visit www.declude.com --- This email has been scanned for possible viruses by Declude Antivirus. For more information on Declude Antivirus, Visit www.declude.com --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
Re: [Declude.Virus] RAR Support - why not?
Notices only go out for banned files. We include a statement that the email will be available to be requeued for x number of days...so automatic processes clean it up if it's unclaimed. Regarding the space problem, are you moving logs off to another partition on a nightly basis? Between that, automatic cleanup, and zipping old logs ours stays pretty clean. Darin. - Original Message - From: "Andy Schmidt" <[EMAIL PROTECTED]> To: Sent: Friday, January 28, 2005 5:05 PM Subject: RE: [Declude.Virus] RAR Support - why not? Hi Goran: Oh, I've been thinking about just that. However does that mean you hold all virus files? I don't think I could afford the additional disk space (the spool file is already too big as it is.) Best Regards Andy -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Goran Jovanovic Sent: Friday, January 28, 2005 12:48 PM To: Declude.Virus@declude.com Subject: RE: [Declude.Virus] RAR Support - why not? Andy, Someone posted on this list a while ago a small ASP page that I am using to requeue a banned file. I send out a bannotify.eml what has the link back to the server with the appropriate file name. The user says I really really want this file and clicks on the link. It gets requeued automatically into the spool directory and it is not scanned/banned again and the user gets it within 30 minutes. I remember that there was some discussion on the list a while ago about having the users authenticate and fill in a form etc. I decided not to bother with that. I can send you my bannotify.eml and the asp file if you wish. Let me know Goran Jovanovic The LAN Shoppe > -Original Message- > From: [EMAIL PROTECTED] [mailto:Declude.Virus- > [EMAIL PROTECTED] On Behalf Of Andy Schmidt > Sent: Thursday, January 27, 2005 6:27 PM > To: Declude.Virus@declude.com > Subject: RE: [Declude.Virus] RAR Support - why not? > > >> 1.82 will treat encrypted .RAR files the same as encrypted .ZIP files, > and will block banned file extensions in .RAR files the same way as it > blocks banned file extensions in .ZIP files. << > > Beautiful! > > Now we just need McAfee to scan inside RAR files > > (Globally banning zipped .EXE files is not an option for me - I gotta give > those customers SOME practical way to send/receive "restricted" file > types.) > > Best Regards > Andy > > > --- > [This E-mail was scanned for viruses by Declude Virus > (http://www.declude.com)] > > --- > This E-mail came from the Declude.Virus mailing list. To unsubscribe, > just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.Virus".The archives can be found > at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] RAR Support - why not?
Hi Goran: Oh, I've been thinking about just that. However does that mean you hold all virus files? I don't think I could afford the additional disk space (the spool file is already too big as it is.) Best Regards Andy -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Goran Jovanovic Sent: Friday, January 28, 2005 12:48 PM To: Declude.Virus@declude.com Subject: RE: [Declude.Virus] RAR Support - why not? Andy, Someone posted on this list a while ago a small ASP page that I am using to requeue a banned file. I send out a bannotify.eml what has the link back to the server with the appropriate file name. The user says I really really want this file and clicks on the link. It gets requeued automatically into the spool directory and it is not scanned/banned again and the user gets it within 30 minutes. I remember that there was some discussion on the list a while ago about having the users authenticate and fill in a form etc. I decided not to bother with that. I can send you my bannotify.eml and the asp file if you wish. Let me know Goran Jovanovic The LAN Shoppe > -Original Message- > From: [EMAIL PROTECTED] [mailto:Declude.Virus- > [EMAIL PROTECTED] On Behalf Of Andy Schmidt > Sent: Thursday, January 27, 2005 6:27 PM > To: Declude.Virus@declude.com > Subject: RE: [Declude.Virus] RAR Support - why not? > > >> 1.82 will treat encrypted .RAR files the same as encrypted .ZIP files, > and will block banned file extensions in .RAR files the same way as it > blocks banned file extensions in .ZIP files. << > > Beautiful! > > Now we just need McAfee to scan inside RAR files > > (Globally banning zipped .EXE files is not an option for me - I gotta give > those customers SOME practical way to send/receive "restricted" file > types.) > > Best Regards > Andy > > > --- > [This E-mail was scanned for viruses by Declude Virus > (http://www.declude.com)] > > --- > This E-mail came from the Declude.Virus mailing list. To unsubscribe, > just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.Virus".The archives can be found > at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] RAR Support - why not?
Andy, Someone posted on this list a while ago a small ASP page that I am using to requeue a banned file. I send out a bannotify.eml what has the link back to the server with the appropriate file name. The user says I really really want this file and clicks on the link. It gets requeued automatically into the spool directory and it is not scanned/banned again and the user gets it within 30 minutes. I remember that there was some discussion on the list a while ago about having the users authenticate and fill in a form etc. I decided not to bother with that. I can send you my bannotify.eml and the asp file if you wish. Let me know Goran Jovanovic The LAN Shoppe > -Original Message- > From: [EMAIL PROTECTED] [mailto:Declude.Virus- > [EMAIL PROTECTED] On Behalf Of Andy Schmidt > Sent: Thursday, January 27, 2005 6:27 PM > To: Declude.Virus@declude.com > Subject: RE: [Declude.Virus] RAR Support - why not? > > >> 1.82 will treat encrypted .RAR files the same as encrypted .ZIP files, > and will block banned file extensions in .RAR files the same way as it > blocks banned file extensions in .ZIP files. << > > Beautiful! > > Now we just need McAfee to scan inside RAR files > > (Globally banning zipped .EXE files is not an option for me - I gotta give > those customers SOME practical way to send/receive "restricted" file > types.) > > Best Regards > Andy > > > --- > [This E-mail was scanned for viruses by Declude Virus > (http://www.declude.com)] > > --- > This E-mail came from the Declude.Virus mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.Virus".The archives can be found > at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
Re: [Declude.Virus] RAR Support - why not?
- Original Message - From: "Andy Schmidt" <[EMAIL PROTECTED]> > Now we just need McAfee to scan inside RAR files Indeed! Even F-Prot scans inside of .rar files: = cat report.txt Virus scanning report - 27 January 2005 @ 16:46 F-PROT ANTIVIRUS Program version: 3.16a Engine version: 3.16.2 VIRUS SIGNATURE FILES SIGN.DEF created 27 January 2005 SIGN2.DEF created 27 January 2005 MACRO.DEF created 27 January 2005 Search: MsWindowsUpdate.rar Action: Report only Files: "Dumb" scan of all files Switches: /ARCHIVE /PACKED /SERVER /REPORT=report.txt Memory was not scanned. Hard disk boot sectors were not scanned. F:\Virus-Test\MsWindowsUpdate.rar->MsWindowsUpdate.exe is a dropper for W32/[EMAIL PROTECTED] = Bill --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] RAR Support - why not?
>> 1.82 will treat encrypted .RAR files the same as encrypted .ZIP files, and will block banned file extensions in .RAR files the same way as it blocks banned file extensions in .ZIP files. << Beautiful! Now we just need McAfee to scan inside RAR files (Globally banning zipped .EXE files is not an option for me - I gotta give those customers SOME practical way to send/receive "restricted" file types.) Best Regards Andy --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] RAR Support - why not?
In fact, I wonder if Declude 2.1 could use those libraries to "unrar" files to look inside RAR archives? How about 1.82? :) 1.82 will treat encrypted .RAR files the same as encrypted .ZIP files, and will block banned file extensions in .RAR files the same way as it blocks banned file extensions in .ZIP files. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. This outgoing message is guaranteed to be authentic by Message Level users. Guarantee the authenticity of your email @ http://www.messagelevel.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] RAR Support - why not?
Hm, http://www.rarreg.com/licence.php "No person or company may distribute separate parts of the package ==> with the exception of the UnRAR components <==, without written permission of the copyright owner." So - it looks as if it's an open license for the UnRAR components - and only the WinRAR/RAR application is restricted. Best Regards Andy --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] RAR Support - why not?
Hm, >> It isn't gonna happen, unless rarsoft sells to winzip. << I'm not sure if this it legit: http://www.rarlab.com/rar_add.htm But it appears that "unrar" source code, DLLs etc are readily available to software developers? (Even if it was not, Winzip already has command line "links" for some of the older file types, I see no licensing problem if they wanted to support "rar" on that level.) In fact, I wonder if Declude 2.1 could use those libraries to "unrar" files to look inside RAR archives? Best Regards Andy --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
