Darrell, 1. Are components of the message hashed and some type of hash is sent to CommTouch for analysis?
RPD extracts 2 types of patterns from the message, Distribution Patterns (from the header), and Structural Pattern (mathematical sample of the body and attachments. These patterns don't contain anything to violate privacy concerns. They don't use things like recipient information, and the structural patterns are a random sampling of the bytes of the message (not looking for the content or meaning of the words). These patterns make up what is called a digital signature, that is one way hashed using md5 and sent to CT detection centers where the hash is compared to CT DB hashes. A reply is sent back with the result classification. This process takes about 150ms. 2. What ports/protocol does it communicate with CommTouch back on? The CT Engine communicates to CT centers over port 80. A proprietary protocol is used for this communication, it is not standard HTTP. As long as the box can access the internet (with or without a proxy), CT can access our centers. There is also a built-in failover mechanism. 3. Is there a mechanism that if false positive is detected to do a what we call when using Sniffer a rule panic? There is a procedure that Declude or users can report FP's to CommTouch. I am having a KB article written on how to do this. 4. Is there a trial? Unfortunately not as every time CT is activated we pay a fee. David B www.declude.com -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darrell ([EMAIL PROTECTED]) Sent: Wednesday, July 19, 2006 10:26 AM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] Declude 4.3 - Commtouch trial ? David, Are components of the message hashed and some type of hash is sent to CommTouch for analysis? What ports/protocol does it communicate with CommTouch back on? How does one handle false positives? through Declude or directly to CommTouch? Is there a mechanism that if false positive is detected to do a what we call when using sniffer a rule panic? Is there a trial? Darrell David Barker writes: > Darrell, > > It is not a DNS test. Commtouch analyzes large volumes of Internet > traffic in real time. New spam and Malware outbreaks are identified as > soon as emerge, and recorded in the Commtouch Detection Center. The > Commtouch in Declude queries the Commtouch Detection Center and > receives a message classification in real-time. The result is instant > protection from new outbreaks. > > David B > www.declude.com > > > -----Original Message----- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of > Darrell > ([EMAIL PROTECTED]) > Sent: Wednesday, July 19, 2006 7:32 AM > To: declude.junkmail@declude.com > Subject: Re: [Declude.JunkMail] Declude 4.3 - Commtouch trial ? > > Also, to piggy back on this - we would like to know exactly how this works. > Is something downloaded to your system is it DNS based etc? > > Darrell > ---------------------------------------------------------------------- > -- Check out http://www.invariantsystems.com for utilities for Declude > And Imail. IMail/Declude Overflow Queue Monitoring, SURBL/URI > integration, MRTG Integration, and Log Parsers. > > ----- Original Message ----- > From: "Scott Fisher" <[EMAIL PROTECTED]> > To: <declude.junkmail@declude.com> > Sent: Friday, July 14, 2006 5:26 PM > Subject: Re: [Declude.JunkMail] Declude 4.3 - Commtouch trial ? > > > -David, > > Just curious is there a free one-month test drive option for CommTouch > or something similiar? > As one of those pesky non-ISP's the $195 a year is pretty reasonable, > but I'd really like to test drive it before I buy it. > > Not to be offensive, but I have no belief of the "100% no false positive" > pitch and the "99.99+% spam catch rate" pitch. > Trust me I get many a phone call hyping those terms. > > And I'll have to make that jump to Declude 4.x too. > > ----- Original Message ----- > From: "David Barker" <[EMAIL PROTECTED]> > To: <declude.junkmail@declude.com> > Sent: Tuesday, July 18, 2006 2:42 PM > Subject: RE: [Declude.JunkMail] Declude 4.3 > > >> There are restrictions on CommTouch being used by Service Providers >> we had to ensure that NEW customers (ie. Service Providers After 1 >> June 06) understand the licensing restrictions. >> >> Current Service Providers (ie. Before 1 June 06) are under no >> restrictions for using Declude; only the CommTouch add-in component. >> >> However we have managed to come to an agreement with CommTouch to >> enable our legacy customers (ie. Service Providers Before 1 June 06) >> to take advantage of CommTouch under a revenue share program, this >> program is not being forced onto legacy customers but will be an >> opportunity for us to help you increase revenues in your business, by >> providing you with new product like the Declude Gateway which would >> be independent of Imail/SmarterMail and will include CommTouch. >> >> David B >> www.declude.com >> >> >> >> -----Original Message----- >> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of >> John T >> (Lists) >> Sent: Tuesday, July 18, 2006 3:02 PM >> To: declude.junkmail@declude.com >> Subject: RE: [Declude.JunkMail] Declude 4.3 >> >> I guess we all missed the following paragraph in the license agreement: >> >> 3.2.6 sub-license, rent, sell, lease, distribute, or otherwise >> transfer the Licensed Program save as provided under this End-User >> License Agreement unless You obtain a separate License from Declude, >> Inc. for such purposes (for example, You may not embed the Licensed >> Program into another application and then distribute such to third >> parties unless You first acquire an OEM License from Declude, Inc.). >> As of June 1, 2006, ISP's and other service providers are not >> permitted to use Declude software to clean and forward mail to >> customers unless a separate revenue share agreement has been >> established with Declude. >> >> http://www.declude.com/Articles.asp?ID=121 >> >> Is Declude trying to put us out of business? We pay for the software >> and now have to pay them some of your meager profits? >> >> John T >> eServices For You >> >> "Seek, and ye shall find!" >> >>> -----Original Message----- >>> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of >>> Gary Steiner >>> Sent: Tuesday, July 18, 2006 11:24 AM >>> To: declude.junkmail@declude.com >>> Subject: [Declude.JunkMail] Declude 4.3 >>> >>> I guess someone is going to make an official announcement today >>> about >> Declude 4.3? >>> I see that its downloadable in my account, but it would be nice to >>> know >> what I'm >>> getting before I install it, especially the new Commtouch stuff. >>> >>> The "Restrictions" listed next to the Add Commtouch section are >>> especially >> confusing. >>> >>> https://www.declude.com/articles.asp?ID=205 >>> >>> Who would use Declude and not fit the definitions of the restrictions? >> Based on my >>> reading of the Restrictions, nobody who uses Declude will ever be >>> able to >> use >>> Commtouch. If I am misreading this, would someone please explain it >>> to >> me? >>> >>> Gary >>> >>> >>> >>> >>> >>> --- >>> This E-mail came from the Declude.JunkMail mailing list. To >>> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type >>> "unsubscribe Declude.JunkMail". The archives can be found at >>> http://www.mail-archive.com. >> >> >> >> >> --- >> This E-mail came from the Declude.JunkMail mailing list. To >> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type >> "unsubscribe Declude.JunkMail". The archives can be found at >> http://www.mail-archive.com. >> >> >> >> --- >> This E-mail came from the Declude.JunkMail mailing list. To >> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type >> "unsubscribe Declude.JunkMail". The archives can be found at >> http://www.mail-archive.com. >> >> > > > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type > "unsubscribe Declude.JunkMail". The archives can be found at > http://www.mail-archive.com. > > > > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type > "unsubscribe Declude.JunkMail". The archives can be found at > http://www.mail-archive.com. > > > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type > "unsubscribe Declude.JunkMail". The archives can be found at > http://www.mail-archive.com. > ------------------------------------------- Check out http://www.invariantsystems.com for utilities for Declude, Imail, mxGuard, and ORF. IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG Integration, and Log Parsers. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
