I agree, ZEROHOUR needs to fuction like all the other tests. David
-----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Matt Sent: Wednesday, October 25, 2006 2:59 PM To: [email protected] Subject: Re: [Declude.JunkMail] RE: Declude's To-Do List I agree, the openness is refreshing. Also, it shouldn't be forgotten that most of these bugs existed back in the the Scott days, but for the most part weren't known to be bugs. BTW, I too would like to see that X-Declude-RefID removed when it isn't used, and maybe Declude should consider approaching this header the exact same way as all of the others it inserts; fully customizable with variables, and different for incoming and outgoing E-mail. All that would need to be done is add a %DecludeRefID% to the list and leave it at that, no packing of this header by default. Matt Andy Schmidt wrote: > Hi, > > Thanks for posting! Openness is a great confidence builder! Seeing that > problems are at least being recognized goes a long way to giving me some > small flicker of hope that things at Declude might turn around yet. > > Now your corporate management has to prove themselves by demonstrating that > they are finally serious about fulfilling the service contracts we purchased > by not allowing crucial problems to remain open for yet another year. They > cannot keep holding out their hands each year, if the money is not spent on > the intended purpose. Fixing the Auto-Whitelist with a simple MDAC SQL query > against the Imail 2006 Workgroupshare database is no rocket science. It > might take a day - but not a year. > > PS: > This is a minor issue and probably doesn't deserve to be on your list - but > I never got a reply on how to suppress the empty and unwanted > > X-Declude-RefID: > > header. > > Best Regards > Andy Schmidt > > Phone: +1 201 934-3414 x20 (Business) > Fax: +1 201 934-9206 > > > -----Original Message----- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David > Barker > Sent: Wednesday, October 25, 2006 10:36 AM > To: [email protected] > Subject: RE: SPAM-WARN: Re: [Declude.JunkMail] RE: On RFC Violation - > Declude allows attachments and Virus to pass through untouched and unscanned > > Here is a preliminary list, not all have been verified and several are > currently being worked on: (Note these does not include Declude adds for new > functionality) Email me if you are aware of a known issue that is not on > this list. > > *Line Terminator Problem > > *Auto whitelist Imail 2006 > > *Reported Memory Leaks & Decludeproc crash on zero pointers > > *Zerohour test doesn't operate as other tests > > *Zip vulnerability > > *Attach function bug (forward as attachment) > > *When there is a MIME header mismatch Declude assumes it is an executable > > *Incorrectly filtering Object Data Vulnerability for MSOffice generated > emails > > *Attached web pages seen as .com files > > *Yahoo CAL emails have header problems which cause improper blocking > > *Encoded attachments not correctly detected - long base64 > > *Prewhitelist is not skipping custom filters > > *Whitelisting messages in lower Log levels > > *SmarterMail order of Domains listed in xml for aliases > > David Barker > Director of Product Development > Your Email security is our business > 978.499.2933 office > 978.988.1311 fax > [EMAIL PROTECTED] > > -----Original Message----- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darin > Cox > Sent: Monday, October 23, 2006 10:35 AM > To: [email protected] > Subject: Re: SPAM-WARN: Re: [Declude.JunkMail] RE: On RFC Violation - > Declude allows attachments and Virus to pass through untouched and unscanned > > Thanks, David. We appreciate your efforts. > > Darin. > > > ----- Original Message ----- > From: "David Barker" <[EMAIL PROTECTED]> > To: <[email protected]> > Sent: Monday, October 23, 2006 10:26 AM > Subject: RE: SPAM-WARN: Re: [Declude.JunkMail] RE: On RFC Violation - > Declude allows attachments and Virus to pass through untouched and unscanned > > > I will see what I can do to bring together a list of known issues. Just give > me some time (days) and I will get it posted. > > David B > www.declude.com > > -----Original Message----- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darin > Cox > Sent: Monday, October 23, 2006 10:19 AM > To: [email protected] > Subject: Re: SPAM-WARN: Re: [Declude.JunkMail] RE: On RFC Violation - > Declude allows attachments and Virus to pass through untouched and unscanned > > Thanks, David. We appreciate your input. > > Is it feasible to post a list of known issues and/or issues being worked? I > realize that's a lot of disclosure, and would probably increase call volume > significantly, but I also know that would make me feel much more comfortable > of someday being able to exercise our two-year-old unused SA, and upgrade to > 4.x. > > Thanks again, > > Darin. > > > ----- Original Message ----- > From: "David Barker" <[EMAIL PROTECTED]> > To: <[email protected]> > Sent: Monday, October 23, 2006 10:00 AM > Subject: RE: SPAM-WARN: Re: [Declude.JunkMail] RE: On RFC Violation - > Declude allows attachments and Virus to pass through untouched and unscanned > > > Darin, > > Our engineer Dave Franco is looking at a way to rewrite every message to > standardize the format in order to overcome the incorrect line terminator > issue. As there are several other things he is working on I do not have a > definitive release date for this, I am looking at moving around some > additional resources to further expedite a solution. > > David Barker > Director of Product Development > Your Email security is our business > 978.499.2933 office > 978.988.1311 fax > [EMAIL PROTECTED] > > > -----Original Message----- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darin > Cox > Sent: Monday, October 23, 2006 9:38 AM > To: [email protected] > Subject: Re: SPAM-WARN: Re: [Declude.JunkMail] RE: On RFC Violation - > Declude allows attachments and Virus to pass through untouched and unscanned > > David Barker, Can you tell us the status of this old case? What progress > has been made on this seemingly critical issue? > > Darin. > > > ----- Original Message ----- > From: "Michael Thomas - Mathbox" <[EMAIL PROTECTED]> > To: <[email protected]> > Sent: Monday, October 23, 2006 1:09 AM > Subject: RE: SPAM-WARN: Re: [Declude.JunkMail] RE: On RFC Violation - > Declude allows attachments and Virus to pass through untouched and unscanned > > > Hi All, > > I said in my original email that Declude had been notified of LF only issue. > I just looked back through my email and found the report. It was Declude > case [06D-0BBF1866-F5A3] on Thu, 30 Mar 2006 22:29:58 -0500. > > Michael Thomas > Mathbox > 978-683-6718 > 1-877-MATHBOX (Toll Free) > > > > > > --- > This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, > just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe > Declude.JunkMail". The archives can be found at > http://www.mail-archive.com. > > > > > > --- > This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, > just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe > Declude.JunkMail". The archives can be found at > http://www.mail-archive.com. > > > > --- > This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, > just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe > Declude.JunkMail". The archives can be found at > http://www.mail-archive.com. > > > > > > --- > This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, > just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe > Declude.JunkMail". The archives can be found at > http://www.mail-archive.com. > > > > --- > This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, > just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe > Declude.JunkMail". The archives can be found at > http://www.mail-archive.com. > > > > > > --- > This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, > just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe > Declude.JunkMail". The archives can be found at > http://www.mail-archive.com. > > > > --- > This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, > just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe > Declude.JunkMail". The archives can be found at > http://www.mail-archive.com. > > > > > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be found > at http://www.mail-archive.com. > > > > --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
