RE: [Declude.JunkMail] RE: [Declude.Virus] Commtouch ZeroHour - no longer active? What's the best procedure everyone uses to renew it?

2009-07-08 Thread David Barker
Andy,


When I checked your record on our server CT was set to ON I did not
reactivate it. 

 

1.   The switch over to the new system was on 6/28 8:00-10:00 pm EST
time. I chose Sunday to do this as web traffic to Declude would be low and
it was after the weekend.

2.   Thanks for pointing out that we should update our own DNS a week
prior. This was done 1 week prior and we set the TTL to 5 min.  Which I
think is still the case and once everything has settled we will move it up
again.

 

I have not pinpointed the exact problem as of yet however the issue you
experienced occurred on some servers and is resolved within minutes of
notifying us, as it was with you. 

 

Thanks 

David 

 

 

From: supp...@declude.com [mailto:supp...@declude.com] On Behalf Of Andy
Schmidt
Sent: Wednesday, July 08, 2009 11:50 AM
To: declude.junkm...@declude.com
Subject: [Declude.JunkMail] RE: [Declude.Virus] Commtouch ZeroHour - no
longer active? What's the best procedure everyone uses to renew it?
Sensitivity: Personal

 

Hi Dave,

 

The Diags.txt I had sent was created from THIS MORNING (I had made a point
of restarting DecludeProc to get a current status). So CommTouch was
definitely reported as OFF at that time.  It had been reported as ON in
June, the previous time that the server had been started (for security
fixes).

 

I cleared the DNS cache and restarted DecludeProc and now Diags.txt reports
ON for CommTouch. So thanks for re-activating it.

 

So - that leaves a whole bunch of new concerns:

 

-  If you ONLY migrated servers THIS week, then THIS was NOT the
reason.
CommTouch had stopped after 6/27, which is 11 days ago. (That's the last
date your log files showed any CommTouch hits!) However, it's the exact date
of my new renewal term! So what precisely happened on 6/28 at midnight?

-  Irregardless, if you switched IP addresses for some of your
servers, that you obviously would have to FIRST update your OWN DNS a week
prior (or whatever the old TTL was) to change the TTL for that DNS record to
something extremely short (e.g., hours). A week later, after the old TTL had
expired, you could THEN change the DNS record to the NEW IP address and
update the TTL to the longer period again. 
If you simply switched IP addresses without prior TTL adjustments, then your
customers would NOT see the new IP until the old TTL had run out. Although
this was not the problem I my case - which host name are we talking about
and how was this migration executed if you feel that your customers have to
flush their DNS cache to obtain the new server address?

 

Best Regards,

Andy

 

From: supp...@declude.com [mailto:supp...@declude.com] On Behalf Of David
Barker
Sent: Wednesday, July 08, 2009 11:04 AM
To: declude.virus@declude.com
Subject: RE: [Declude.Virus] Commtouch ZeroHour - no longer active? What's
the best procedure everyone uses to renew it?
Sensitivity: Personal

 

We just migrated servers this week. It is possible your DNS is using cached
information. Remember a diags.txt is only created on startup so you may have
old information.  Can you flush your DNS cache and restart Declude to see if
it resolves the problem. 

 

David Barker
VP Operations Declude
Your Email security is our business
978.499.2933 office
978.988.1311 fax
 mailto:dbar...@declude.com dbar...@declude.com

 

 

From: supp...@declude.com [mailto:supp...@declude.com] On Behalf Of Andy
Schmidt
Sent: Wednesday, July 08, 2009 10:20 AM
To: declude.virus@declude.com; declude.junkm...@declude.com
Subject: [Declude.Virus] Commtouch ZeroHour - no longer active? What's the
best procedure everyone uses to renew it?
Sensitivity: Personal

 

Hi,

 

I noticed that ZeroHour stopped catching any viruses after 6/28 - and, after
investigating, I now realize it no longer traps any Spam. There were NO
changes to any .CFG (or other Declude files). I'm enclosing the most recent
Diags.txt (from 6/18, where CommTouch was ON) and then one from today after
I made a point of manually restarting DecludeProc.  Suddenly, it reports
CommTouch as OFF?

 

My customer screen shows:

 


 

Host Information


 Declude Imail Perpetual Lic.

[omitted] 

28 Jun 2010 


 AVG 

Activated

Current



 CommTouch 

Activated



 

It can't be a coincidence that CommTouch stopped working 3 weeks ago,  on
the exact anniversary date of my (renewed) agreement?

 

Since I only purchased CommTouch a few weeks ago, I'm new to this. So, what
do Declude customers have to do after purchasing CommTouch or after renewing
their service agreements to make sure that the software will continue to
work with a complete function set? This way, I can add yet another reminder
to my calendar (besides monitoring the AVG licensing renewal date).

 

 


Overall Server Virus Summary Report


Total Messages Processed: 21,868
Virus Infected Messages: 60
Percentage Infected: 0.27%


VIRUS

# INFECTED

PERCENTAGE



OUTLOOK 'BLANK FOLDING' VULNERABILITY

33

RE: [Declude.JunkMail] RE: [Declude.Virus] Commtouch ZeroHour - no longer active? What's the best procedure everyone uses to renew it?

2009-07-08 Thread David Barker
Andy,


When I checked your record on our server CT was set to ON I did not
reactivate it. 

 

1.   The switch over to the new system was on 6/28 8:00-10:00 pm EST
time. I chose Sunday to do this as web traffic to Declude would be low and
it was after the weekend.

2.   Thanks for pointing out that we should update our own DNS a week
prior. This was done 1 week prior and we set the TTL to 5 min.  Which I
think is still the case and once everything has settled we will move it up
again.

 

I have not pinpointed the exact problem as of yet however the issue you
experienced occurred on some servers and is resolved within minutes of
notifying us, as it was with you. 

 

Thanks 

David 

 

 

From: supp...@declude.com [mailto:supp...@declude.com] On Behalf Of Andy
Schmidt
Sent: Wednesday, July 08, 2009 11:50 AM
To: declude.junkm...@declude.com
Subject: [Declude.JunkMail] RE: [Declude.Virus] Commtouch ZeroHour - no
longer active? What's the best procedure everyone uses to renew it?
Sensitivity: Personal

 

Hi Dave,

 

The Diags.txt I had sent was created from THIS MORNING (I had made a point
of restarting DecludeProc to get a current status). So CommTouch was
definitely reported as OFF at that time.  It had been reported as ON in
June, the previous time that the server had been started (for security
fixes).

 

I cleared the DNS cache and restarted DecludeProc and now Diags.txt reports
ON for CommTouch. So thanks for re-activating it.

 

So - that leaves a whole bunch of new concerns:

 

-  If you ONLY migrated servers THIS week, then THIS was NOT the
reason.
CommTouch had stopped after 6/27, which is 11 days ago. (That's the last
date your log files showed any CommTouch hits!) However, it's the exact date
of my new renewal term! So what precisely happened on 6/28 at midnight?

-  Irregardless, if you switched IP addresses for some of your
servers, that you obviously would have to FIRST update your OWN DNS a week
prior (or whatever the old TTL was) to change the TTL for that DNS record to
something extremely short (e.g., hours). A week later, after the old TTL had
expired, you could THEN change the DNS record to the NEW IP address and
update the TTL to the longer period again. 
If you simply switched IP addresses without prior TTL adjustments, then your
customers would NOT see the new IP until the old TTL had run out. Although
this was not the problem I my case - which host name are we talking about
and how was this migration executed if you feel that your customers have to
flush their DNS cache to obtain the new server address?

 

Best Regards,

Andy

 

From: supp...@declude.com [mailto:supp...@declude.com] On Behalf Of David
Barker
Sent: Wednesday, July 08, 2009 11:04 AM
To: declude.virus@declude.com
Subject: RE: [Declude.Virus] Commtouch ZeroHour - no longer active? What's
the best procedure everyone uses to renew it?
Sensitivity: Personal

 

We just migrated servers this week. It is possible your DNS is using cached
information. Remember a diags.txt is only created on startup so you may have
old information.  Can you flush your DNS cache and restart Declude to see if
it resolves the problem. 

 

David Barker
VP Operations Declude
Your Email security is our business
978.499.2933 office
978.988.1311 fax
 mailto:dbar...@declude.com dbar...@declude.com

 

 

From: supp...@declude.com [mailto:supp...@declude.com] On Behalf Of Andy
Schmidt
Sent: Wednesday, July 08, 2009 10:20 AM
To: declude.virus@declude.com; declude.junkm...@declude.com
Subject: [Declude.Virus] Commtouch ZeroHour - no longer active? What's the
best procedure everyone uses to renew it?
Sensitivity: Personal

 

Hi,

 

I noticed that ZeroHour stopped catching any viruses after 6/28 - and, after
investigating, I now realize it no longer traps any Spam. There were NO
changes to any .CFG (or other Declude files). I'm enclosing the most recent
Diags.txt (from 6/18, where CommTouch was ON) and then one from today after
I made a point of manually restarting DecludeProc.  Suddenly, it reports
CommTouch as OFF?

 

My customer screen shows:

 


 

Host Information


 Declude Imail Perpetual Lic.

[omitted] 

28 Jun 2010 


 AVG 

Activated

Current



 CommTouch 

Activated



 

It can't be a coincidence that CommTouch stopped working 3 weeks ago,  on
the exact anniversary date of my (renewed) agreement?

 

Since I only purchased CommTouch a few weeks ago, I'm new to this. So, what
do Declude customers have to do after purchasing CommTouch or after renewing
their service agreements to make sure that the software will continue to
work with a complete function set? This way, I can add yet another reminder
to my calendar (besides monitoring the AVG licensing renewal date).

 

 


Overall Server Virus Summary Report


Total Messages Processed: 21,868
Virus Infected Messages: 60
Percentage Infected: 0.27%


VIRUS

# INFECTED

PERCENTAGE



OUTLOOK 'BLANK FOLDING' VULNERABILITY

33