How about a simple question? -- have you ran Declude.exe in the new server?
If not simply double click the Declude.exe and test again. Regards, Kami -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of ISPhuset Nordic AS Sent: Tuesday, August 12, 2003 4:16 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.Virus] problems when testing a new server running the exact same version but what i found here is that if i log onto my webmail on the old server i can send and eicar.com file to my account on another domain and it is not being stopped either from the virus scanner or from the banext in my config file but do i send it from my mailclient it works ok -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jim Matuska Sent: 12. august 2003 22:02 To: [EMAIL PROTECTED] Subject: Re: [Declude.Virus] problems when testing a new server Are you running the same versions of Imail and declude on each server, I seem to remember something a while back about needing a later version of Imail or Declude to catch webmail based virus attachments. Jim Matuska Jr. Computer Tech II CCNA Nez Perce Tribe Information Systems [EMAIL PROTECTED] ----- Original Message ----- From: "ISPhuset Nordic AS" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Tuesday, August 12, 2003 12:41 PM Subject: [Declude.Virus] problems when testing a new server > Have sett up the server in the exact same with one exception > > on the old server i use f-prot312c > > on the new server i user f-prot314a_m > > when i run a test with eicar.com on the server localy in webmail it > slips through when i have i only the on demand scanner installed > > copy of config > > # > # Declude Virus configuration file > # > > CODE 6F4B90A4 > > # The "####" in the LOGFILE option gets replaced with the month/date > > LOGFILE E:\virus\vir####.log > LOGLEVEL MID > CONSOLE OFF > > > # SCANFILE is the location of the command-line virus scanner. Note > that it # must include the full path. VIRUSCODE is the code that > scanner returns if > # it finds a virus. > > SCANFILE C:\f-prot\fpcmd.exe /TYPE /SILENT /NOMEM /NOFLOPPY /ARCHIVE /NOBOOT /DUMB /REPORT=report.txt > > VIRUSCODE 3 > VIRUSCODE 6 > #VIRUSCODE 8 > REPORT Infection > > PRESCAN ON > > > # VIRDIR is the directory to move E-mails with viruses; by default, # > it is set to 'virus' (\IMail\spool\virus). > > VIRDIR E:\virus > > # The MAXATONCE option limits the number of AV processes. For > example, # MAXATONCE 1 will only allow 1 AV process to run at once (IE > for licensing > # purposes). A value of 0 (or commenting it out) allows unlimited processes > # to run at the same time. > #MAXATONCE 1 > > ## The following options allow you to limit scanning to only incoming > or outgoing > # E-mail, with v1.13 and higher. If they are commented out ("#" in > front of them), > # Declude will scan all E-mail. > > #INCOMING ON > #OUTGOING ON > > BANEXT COM > BANEXT PIF > BANEXT EXE > BANEXT SCR > > BANNAME message.zip > > > > when i turn on the real time protector i cant attatch the eicar.com > file deny it just at is should > > Any good ideas here > > --- > [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] > > --- > This E-mail came from the Declude.Virus mailing list. To unsubscribe, > just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.Virus". The archives can be found > at http://www.mail-archive.com. > --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com.
