RE: [Declude.Virus] Limit Size of message to be scanned?

2005-07-08 Thread John Tolmachoff \(Lists\)








50 MB e-mail attachments?

 

Youch!

 



John T

eServices For You



 



-Original Message-
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Grant Griffith
Sent: Thursday, July
 07, 2005 8:36 PM
To: Declude.Virus@declude.com
Subject: [Declude.Virus] Limit
Size of message to be scanned?

 

Hello All,

 

Is there a way to limit the size of the message that
Declude/F-Prot can scan?  We have some customers that are sending 50+ meg
files and it is causing our servers to have major issues.  Is there a
setting to say skip anything over a certain size?  Either in F-Prot or
Declude?

 

We fixed it currently by setting it to OFF for certain
domains, but really want to ban extensions and vulnerabilities for those
domains….

 

 

Thanks,

Grant Griffith

EI8HTLEGS, A Division of ETC

(812)932-1000

 










RE: [Declude.Virus] Limit Size of message to be scanned?

2005-07-08 Thread Markus Gufler



have had one with 405 MB last week. 
The entire Declude system has scanned and checked it (it 
was hold due to several suspicious files in the archive). 
Only the _vbscript_ that should move the hold message file 
has created some problems +800 MB of memory usage and some read-errors in the 
declude logfile. Some further messages was not scanned.
 
Markus
 

  
  
  From: [EMAIL PROTECTED] 
  [mailto:[EMAIL PROTECTED] On Behalf Of John Tolmachoff 
  (Lists)Sent: Friday, July 08, 2005 9:05 AMTo: 
  Declude.Virus@declude.comSubject: RE: [Declude.Virus] Limit Size of 
  message to be scanned?
  
  
  50 MB e-mail 
  attachments?
   
  Youch!
   
  
  John 
  T
  eServices For 
  You
   
  
  -Original 
  Message-From: 
  [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] 
  On Behalf Of Grant 
  GriffithSent: 
  Thursday, July 07, 
  2005 8:36 
  PMTo: Declude.Virus@declude.comSubject: [Declude.Virus] Limit Size of 
  message to be scanned?
   
  Hello All,
   
  Is there a way to limit the size 
  of the message that Declude/F-Prot can scan?  We have some customers that 
  are sending 50+ meg files and it is causing our servers to have major 
  issues.  Is there a setting to say skip anything over a certain 
  size?  Either in F-Prot or Declude?
   
  We fixed it currently by setting 
  it to OFF for certain domains, but really want to ban extensions and 
  vulnerabilities for those domains….
   
   
  Thanks,
  Grant Griffith
  EI8HTLEGS, A Division of 
  ETC
  (812)932-1000
   


RE: [Declude.Virus] Limit Size of message to be scanned?

2005-07-08 Thread Andy Schmidt



How do you prevent DoS attacks by someone sending a 405 MB 
attachment 100 times to a list of 10 cc's over a weekend, when it's likely not 
to be read?
Best 
RegardsAndy SchmidtPhone:  +1 201 934-3414 x20 
(Business)Fax:    +1 201 934-9206 
 


From: [EMAIL PROTECTED] 
[mailto:[EMAIL PROTECTED] On Behalf Of Markus 
GuflerSent: Friday, July 08, 2005 03:19 AMTo: 
Declude.Virus@declude.comSubject: RE: [Declude.Virus] Limit Size of 
message to be scanned?

have had one with 405 MB last week. 
The entire Declude system has scanned and checked it (it 
was hold due to several suspicious files in the archive). 
Only the _vbscript_ that should move the hold message file 
has created some problems +800 MB of memory usage and some read-errors in the 
declude logfile. Some further messages was not scanned.
 
Markus
 

  
  
  From: [EMAIL PROTECTED] 
  [mailto:[EMAIL PROTECTED] On Behalf Of John Tolmachoff 
  (Lists)Sent: Friday, July 08, 2005 9:05 AMTo: 
  Declude.Virus@declude.comSubject: RE: [Declude.Virus] Limit Size of 
  message to be scanned?
  
  
  50 MB e-mail 
  attachments?
   
  Youch!
   
  
  John 
  T
  eServices For 
  You
   
  
  -Original 
  Message-From: 
  [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] 
  On Behalf Of Grant 
  GriffithSent: 
  Thursday, July 07, 
  2005 8:36 
  PMTo: Declude.Virus@declude.comSubject: [Declude.Virus] Limit Size of 
  message to be scanned?
   
  Hello All,
   
  Is there a way to limit the size 
  of the message that Declude/F-Prot can scan?  We have some customers that 
  are sending 50+ meg files and it is causing our servers to have major 
  issues.  Is there a setting to say skip anything over a certain 
  size?  Either in F-Prot or Declude?
   
  We fixed it currently by setting 
  it to OFF for certain domains, but really want to ban extensions and 
  vulnerabilities for those domains….
   
   
  Thanks,
  Grant Griffith
  EI8HTLEGS, A Division of 
  ETC
  (812)932-1000
   


RE: [Declude.Virus] Limit Size of message to be scanned?

2005-07-08 Thread Grant Griffith








Yep, we had one client send a 50+ and 45+
at the same time.  That is about the same time the system locked up. 
It is a Dual Pentium 3.6 processors with at least 2 gig of memory.  I
would of hoped it could keep up, but seems to be a pattern this week whenever
huge emails get sent thru the server, it locks up and needs rebooted to fix it.

 

How does anyone else handle this?  I
would guess there would be a way to not scan messages over a certain size

 



Thanks,

Grant Griffith

EI8HTLEGS, A Division of ETC

(812)932-1000











From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John Tolmachoff (Lists)
Sent: Friday, July 08, 2005 2:05
AM
To: Declude.Virus@declude.com
Subject: RE: [Declude.Virus] Limit
Size of message to be scanned?



 

50 MB e-mail attachments?

 

Youch!

 



John T

eServices For You



 



-Original Message-
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Grant Griffith
Sent: Thursday, July 07, 2005 8:36
PM
To: Declude.Virus@declude.com
Subject: [Declude.Virus] Limit
Size of message to be scanned?

 

Hello All,

 

Is there a way to limit the size of the message that
Declude/F-Prot can scan?  We have some customers that are sending 50+ meg
files and it is causing our servers to have major issues.  Is there a
setting to say skip anything over a certain size?  Either in F-Prot or
Declude?

 

We fixed it currently by setting it to OFF for certain domains,
but really want to ban extensions and vulnerabilities for those domains….

 

 

Thanks,

Grant Griffith

EI8HTLEGS, A Division of ETC

(812)932-1000

 










Re: [Declude.Virus] Limit Size of message to be scanned?

2005-07-08 Thread Darrell \([EMAIL PROTECTED])
Grant, 

Their is nothing native to Declude to prevent that - the only real option 
besides something custom is to limit the size at the imail layer. 


Darrell

InvURIBL - Intelligent URL filtering - stops 85% of spam with the default 
configuration.  http://www.invariantsystems.com 



Grant Griffith writes: 


Yep, we had one client send a 50+ and 45+ at the same time.  That is about
the same time the system locked up.  It is a Dual Pentium 3.6 processors
with at least 2 gig of memory.  I would of hoped it could keep up, but seems
to be a pattern this week whenever huge emails get sent thru the server, it
locks up and needs rebooted to fix it. 

  


How does anyone else handle this?  I would guess there would be a way to not
scan messages over a certain size 

  

Thanks, 

Grant Griffith 

EI8HTLEGS, A Division of ETC 

(812)932-1000 

  _   


From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of John Tolmachoff
(Lists)
Sent: Friday, July 08, 2005 2:05 AM
To: Declude.Virus@declude.com
Subject: RE: [Declude.Virus] Limit Size of message to be scanned? 

  

50 MB e-mail attachments? 

  

Youch! 

  

John T 

eServices For You 

  


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Grant Griffith
Sent: Thursday, July 07, 2005 8:36 PM
To: Declude.Virus@declude.com
Subject: [Declude.Virus] Limit Size of message to be scanned? 

  

Hello All, 

  


Is there a way to limit the size of the message that Declude/F-Prot can
scan?  We have some customers that are sending 50+ meg files and it is
causing our servers to have major issues.  Is there a setting to say skip
anything over a certain size?  Either in F-Prot or Declude? 

  


We fixed it currently by setting it to OFF for certain domains, but really
want to ban extensions and vulnerabilities for those domains.. 

  

  

Thanks, 

Grant Griffith 

EI8HTLEGS, A Division of ETC 

(812)932-1000 

  




---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".The archives can be found
at http://www.mail-archive.com.


Re: [Declude.Virus] Limit Size of message to be scanned?

2005-07-08 Thread Scott Fisher



I use skipext to bypass some of my larger file 
types:
SKIPEXT  EPSSKIPEXT  GIFSKIPEXT  inddSKIPEXT  JPGSKIPEXT  JPEGSKIPEXT  MPGSKIPEXT  MPEGSKIPEXT  MOVSKIPEXT  P65SKIPEXT  PMDSKIPEXT  PDFSKIPEXT 
 PSDSKIPEXT  QXDSKIPEXT  TIFSKIPEXT 
 TIFF
 
Of course by skipping these extensions (especially 
the jpeg and PDF) I do run a possible future risk, but it's a risk my CPU must 
take.
 
A skip by message size would be interesting. Say 
skip all zips over 1 MB?
It might also get a SIZE parameter into the 
Junkmail side which would be nice.

  - Original Message - 
  From: 
  Grant Griffith 
  To: Declude.Virus@declude.com 
  Sent: Friday, July 08, 2005 8:50 AM
  Subject: RE: [Declude.Virus] Limit Size 
  of message to be scanned?
  
  
  Yep, we had one 
  client send a 50+ and 45+ at the same time.  That is about the same time 
  the system locked up.  It is a Dual Pentium 3.6 processors with at least 
  2 gig of memory.  I would of hoped it could keep up, but seems to be a 
  pattern this week whenever huge emails get sent thru the server, it locks up 
  and needs rebooted to fix it.
   
  How does anyone else 
  handle this?  I would guess there would be a way to not scan messages 
  over a certain size
   
  
  Thanks,
  Grant 
  Griffith
  EI8HTLEGS, A Division 
  of ETC
  (812)932-1000
  
  
  
  
  From: 
  [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] 
  On Behalf Of John Tolmachoff 
  (Lists)Sent: Friday, July 
  08, 2005 2:05 AMTo: 
  Declude.Virus@declude.comSubject: RE: [Declude.Virus] Limit Size 
  of message to be scanned?
   
  50 MB e-mail 
  attachments?
   
  Youch!
   
  
  John 
  T
  eServices For 
  You
   
  
  -Original 
  Message-From: 
  [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] 
  On Behalf Of Grant 
  GriffithSent: Thursday, July 
  07, 2005 8:36 PMTo: 
  Declude.Virus@declude.comSubject: [Declude.Virus] Limit Size of 
  message to be scanned?
   
  Hello 
  All,
   
  Is there a way to limit the size 
  of the message that Declude/F-Prot can scan?  We have some customers that 
  are sending 50+ meg files and it is causing our servers to have major 
  issues.  Is there a setting to say skip anything over a certain 
  size?  Either in F-Prot or Declude?
   
  We fixed it currently by setting 
  it to OFF for certain domains, but really want to ban extensions and 
  vulnerabilities for those domains….
   
   
  Thanks,
  Grant 
  Griffith
  EI8HTLEGS, A Division of 
  ETC
  (812)932-1000
   


RE: [Declude.Virus] Limit Size of message to be scanned?

2005-07-08 Thread Grant Griffith
Darrell,

How can I do this on the Imail end?  I can limit attachments sent thru Web
Messaging, but not via Outlook or anything else.  At least I can not find
any settings for that.

Thanks,
Grant Griffith
EI8HTLEGS, A Division of ETC
(812)932-1000
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Darrell
([EMAIL PROTECTED])
Sent: Friday, July 08, 2005 9:13 AM
To: Declude.Virus@declude.com
Subject: Re: [Declude.Virus] Limit Size of message to be scanned?

Grant, 

Their is nothing native to Declude to prevent that - the only real option 
besides something custom is to limit the size at the imail layer. 

Darrell
 
InvURIBL - Intelligent URL filtering - stops 85% of spam with the default 
configuration.  http://www.invariantsystems.com 


Grant Griffith writes: 

> Yep, we had one client send a 50+ and 45+ at the same time.  That is about
> the same time the system locked up.  It is a Dual Pentium 3.6 processors
> with at least 2 gig of memory.  I would of hoped it could keep up, but
seems
> to be a pattern this week whenever huge emails get sent thru the server,
it
> locks up and needs rebooted to fix it. 
> 
>   
> 
> How does anyone else handle this?  I would guess there would be a way to
not
> scan messages over a certain size 
> 
>   
> 
> Thanks, 
> 
> Grant Griffith 
> 
> EI8HTLEGS, A Division of ETC 
> 
> (812)932-1000 
> 
>   _   
> 
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On Behalf Of John Tolmachoff
> (Lists)
> Sent: Friday, July 08, 2005 2:05 AM
> To: Declude.Virus@declude.com
> Subject: RE: [Declude.Virus] Limit Size of message to be scanned? 
> 
>   
> 
> 50 MB e-mail attachments? 
> 
>   
> 
> Youch! 
> 
>   
> 
> John T 
> 
> eServices For You 
> 
>   
> 
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On Behalf Of Grant Griffith
> Sent: Thursday, July 07, 2005 8:36 PM
> To: Declude.Virus@declude.com
> Subject: [Declude.Virus] Limit Size of message to be scanned? 
> 
>   
> 
> Hello All, 
> 
>   
> 
> Is there a way to limit the size of the message that Declude/F-Prot can
> scan?  We have some customers that are sending 50+ meg files and it is
> causing our servers to have major issues.  Is there a setting to say skip
> anything over a certain size?  Either in F-Prot or Declude? 
> 
>   
> 
> We fixed it currently by setting it to OFF for certain domains, but really
> want to ban extensions and vulnerabilities for those domains.. 
> 
>   
> 
>   
> 
> Thanks, 
> 
> Grant Griffith 
> 
> EI8HTLEGS, A Division of ETC 
> 
> (812)932-1000 
> 
>   
> 
 

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".The archives can be found
at http://www.mail-archive.com.



---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".The archives can be found
at http://www.mail-archive.com.


Re: [Declude.Virus] Limit Size of message to be scanned?

2005-07-08 Thread Darrell \([EMAIL PROTECTED])
Grant, 

What I do is set the "Single Message Size" under the domain.  The limit I 
have in place for most of my sites I maintain is between 10MB - 20MB. 

If this is a store and forward server you can set this on the primary domain 
of the server and it affects all of the domains you gateway for. 


Darrell

Check out http://www.invariantsystems.com for utilities for Declude And 
Imail.  IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG 
Integration, and Log Parsers. 




Grant Griffith writes: 

Darrell, 


How can I do this on the Imail end?  I can limit attachments sent thru Web
Messaging, but not via Outlook or anything else.  At least I can not find
any settings for that. 


Thanks,
Grant Griffith
EI8HTLEGS, A Division of ETC
(812)932-1000
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Darrell
([EMAIL PROTECTED])
Sent: Friday, July 08, 2005 9:13 AM
To: Declude.Virus@declude.com
Subject: Re: [Declude.Virus] Limit Size of message to be scanned? 

Grant,  

Their is nothing native to Declude to prevent that - the only real option 
besides something custom is to limit the size at the imail layer.  


Darrell
 
InvURIBL - Intelligent URL filtering - stops 85% of spam with the default 
configuration.  http://www.invariantsystems.com  



Grant Griffith writes:  


Yep, we had one client send a 50+ and 45+ at the same time.  That is about
the same time the system locked up.  It is a Dual Pentium 3.6 processors
with at least 2 gig of memory.  I would of hoped it could keep up, but

seems

to be a pattern this week whenever huge emails get sent thru the server,

it
locks up and needs rebooted to fix it.  

   


How does anyone else handle this?  I would guess there would be a way to

not
scan messages over a certain size  

   

Thanks,  

Grant Griffith  

EI8HTLEGS, A Division of ETC  

(812)932-1000  

  _


From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of John Tolmachoff
(Lists)
Sent: Friday, July 08, 2005 2:05 AM
To: Declude.Virus@declude.com
Subject: RE: [Declude.Virus] Limit Size of message to be scanned?  

   

50 MB e-mail attachments?  

   

Youch!  

   

John T  

eServices For You  

   


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Grant Griffith
Sent: Thursday, July 07, 2005 8:36 PM
To: Declude.Virus@declude.com
Subject: [Declude.Virus] Limit Size of message to be scanned?  

   

Hello All,  

   


Is there a way to limit the size of the message that Declude/F-Prot can
scan?  We have some customers that are sending 50+ meg files and it is
causing our servers to have major issues.  Is there a setting to say skip
anything over a certain size?  Either in F-Prot or Declude?  

   


We fixed it currently by setting it to OFF for certain domains, but really
want to ban extensions and vulnerabilities for those domains..  

   

   

Thanks,  

Grant Griffith  

EI8HTLEGS, A Division of ETC  

(812)932-1000  

   

  


---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".The archives can be found
at http://www.mail-archive.com. 

 


---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".The archives can be found
at http://www.mail-archive.com.



---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".The archives can be found
at http://www.mail-archive.com.


RE: [Declude.Virus] Limit Size of message to be scanned?

2005-07-08 Thread Grant Griffith
Thanks Darrell,

I knew the setting was there somewhere, but kept overlooking it.

Thanks,
Grant Griffith
EI8HTLEGS, A Division of ETC
(812)932-1000

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Darrell
([EMAIL PROTECTED])
Sent: Friday, July 08, 2005 9:34 AM
To: Declude.Virus@declude.com
Subject: Re: [Declude.Virus] Limit Size of message to be scanned?

Grant, 

What I do is set the "Single Message Size" under the domain.  The limit I 
have in place for most of my sites I maintain is between 10MB - 20MB. 

If this is a store and forward server you can set this on the primary domain

of the server and it affects all of the domains you gateway for. 

Darrell
 
Check out http://www.invariantsystems.com for utilities for Declude And 
Imail.  IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG

Integration, and Log Parsers. 

 

Grant Griffith writes: 

> Darrell, 
> 
> How can I do this on the Imail end?  I can limit attachments sent thru Web
> Messaging, but not via Outlook or anything else.  At least I can not find
> any settings for that. 
> 
> Thanks,
> Grant Griffith
> EI8HTLEGS, A Division of ETC
> (812)932-1000
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On Behalf Of Darrell
> ([EMAIL PROTECTED])
> Sent: Friday, July 08, 2005 9:13 AM
> To: Declude.Virus@declude.com
> Subject: Re: [Declude.Virus] Limit Size of message to be scanned? 
> 
> Grant,  
> 
> Their is nothing native to Declude to prevent that - the only real option 
> besides something custom is to limit the size at the imail layer.  
> 
> Darrell
>  
> InvURIBL - Intelligent URL filtering - stops 85% of spam with the default 
> configuration.  http://www.invariantsystems.com  
> 
> 
> Grant Griffith writes:  
> 
>> Yep, we had one client send a 50+ and 45+ at the same time.  That is
about
>> the same time the system locked up.  It is a Dual Pentium 3.6 processors
>> with at least 2 gig of memory.  I would of hoped it could keep up, but
> seems
>> to be a pattern this week whenever huge emails get sent thru the server,
> it
>> locks up and needs rebooted to fix it.  
>> 
>>
>> 
>> How does anyone else handle this?  I would guess there would be a way to
> not
>> scan messages over a certain size  
>> 
>>
>> 
>> Thanks,  
>> 
>> Grant Griffith  
>> 
>> EI8HTLEGS, A Division of ETC  
>> 
>> (812)932-1000  
>> 
>>   _
>> 
>> From: [EMAIL PROTECTED]
>> [mailto:[EMAIL PROTECTED] On Behalf Of John Tolmachoff
>> (Lists)
>> Sent: Friday, July 08, 2005 2:05 AM
>> To: Declude.Virus@declude.com
>> Subject: RE: [Declude.Virus] Limit Size of message to be scanned?  
>> 
>>
>> 
>> 50 MB e-mail attachments?  
>> 
>>
>> 
>> Youch!  
>> 
>>
>> 
>> John T  
>> 
>> eServices For You  
>> 
>>
>> 
>> -Original Message-
>> From: [EMAIL PROTECTED]
>> [mailto:[EMAIL PROTECTED] On Behalf Of Grant Griffith
>> Sent: Thursday, July 07, 2005 8:36 PM
>> To: Declude.Virus@declude.com
>> Subject: [Declude.Virus] Limit Size of message to be scanned?  
>> 
>>
>> 
>> Hello All,  
>> 
>>
>> 
>> Is there a way to limit the size of the message that Declude/F-Prot can
>> scan?  We have some customers that are sending 50+ meg files and it is
>> causing our servers to have major issues.  Is there a setting to say skip
>> anything over a certain size?  Either in F-Prot or Declude?  
>> 
>>
>> 
>> We fixed it currently by setting it to OFF for certain domains, but
really
>> want to ban extensions and vulnerabilities for those domains..  
>> 
>>
>> 
>>
>> 
>> Thanks,  
>> 
>> Grant Griffith  
>> 
>> EI8HTLEGS, A Division of ETC  
>> 
>> (812)932-1000  
>> 
>>
>> 
>   
> 
> ---
> This E-mail came from the Declude.Virus mailing list.  To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.Virus".The archives can be found
> at http://www.mail-archive.com. 
> 
>  
> 
> ---
> This E-mail came from the Declude.Virus mailing list.  To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.Virus".The archives can be found
> at http://www.mail-archive.com.
 

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".The archives can be found
at http://www.mail-archive.com.



---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".The archives can be found
at http://www.mail-archive.com.


RE: [Declude.Virus] Limit Size of message to be scanned?

2005-07-08 Thread Grant Griffith
Hey All,

Is there a known issue with Declude 2.0.6.16 and Imail 8.2?  I recall
reading something a few weeks ago about a possible issue and we did just
upgrade toward the end of last week.

I scanned the archives, but did not find anything specific.

Thanks,
Grant Griffith
EI8HTLEGS, A Division of ETC
(812)932-1000

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Grant Griffith
Sent: Friday, July 08, 2005 9:38 AM
To: Declude.Virus@declude.com
Subject: RE: [Declude.Virus] Limit Size of message to be scanned?

Thanks Darrell,

I knew the setting was there somewhere, but kept overlooking it.

Thanks,
Grant Griffith
EI8HTLEGS, A Division of ETC
(812)932-1000

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Darrell
([EMAIL PROTECTED])
Sent: Friday, July 08, 2005 9:34 AM
To: Declude.Virus@declude.com
Subject: Re: [Declude.Virus] Limit Size of message to be scanned?

Grant, 

What I do is set the "Single Message Size" under the domain.  The limit I 
have in place for most of my sites I maintain is between 10MB - 20MB. 

If this is a store and forward server you can set this on the primary domain

of the server and it affects all of the domains you gateway for. 

Darrell
 
Check out http://www.invariantsystems.com for utilities for Declude And 
Imail.  IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG

Integration, and Log Parsers. 

 

Grant Griffith writes: 

> Darrell, 
> 
> How can I do this on the Imail end?  I can limit attachments sent thru Web
> Messaging, but not via Outlook or anything else.  At least I can not find
> any settings for that. 
> 
> Thanks,
> Grant Griffith
> EI8HTLEGS, A Division of ETC
> (812)932-1000
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On Behalf Of Darrell
> ([EMAIL PROTECTED])
> Sent: Friday, July 08, 2005 9:13 AM
> To: Declude.Virus@declude.com
> Subject: Re: [Declude.Virus] Limit Size of message to be scanned? 
> 
> Grant,  
> 
> Their is nothing native to Declude to prevent that - the only real option 
> besides something custom is to limit the size at the imail layer.  
> 
> Darrell
>  
> InvURIBL - Intelligent URL filtering - stops 85% of spam with the default 
> configuration.  http://www.invariantsystems.com  
> 
> 
> Grant Griffith writes:  
> 
>> Yep, we had one client send a 50+ and 45+ at the same time.  That is
about
>> the same time the system locked up.  It is a Dual Pentium 3.6 processors
>> with at least 2 gig of memory.  I would of hoped it could keep up, but
> seems
>> to be a pattern this week whenever huge emails get sent thru the server,
> it
>> locks up and needs rebooted to fix it.  
>> 
>>
>> 
>> How does anyone else handle this?  I would guess there would be a way to
> not
>> scan messages over a certain size  
>> 
>>
>> 
>> Thanks,  
>> 
>> Grant Griffith  
>> 
>> EI8HTLEGS, A Division of ETC  
>> 
>> (812)932-1000  
>> 
>>   _
>> 
>> From: [EMAIL PROTECTED]
>> [mailto:[EMAIL PROTECTED] On Behalf Of John Tolmachoff
>> (Lists)
>> Sent: Friday, July 08, 2005 2:05 AM
>> To: Declude.Virus@declude.com
>> Subject: RE: [Declude.Virus] Limit Size of message to be scanned?  
>> 
>>
>> 
>> 50 MB e-mail attachments?  
>> 
>>
>> 
>> Youch!  
>> 
>>
>> 
>> John T  
>> 
>> eServices For You  
>> 
>>
>> 
>> -Original Message-
>> From: [EMAIL PROTECTED]
>> [mailto:[EMAIL PROTECTED] On Behalf Of Grant Griffith
>> Sent: Thursday, July 07, 2005 8:36 PM
>> To: Declude.Virus@declude.com
>> Subject: [Declude.Virus] Limit Size of message to be scanned?  
>> 
>>
>> 
>> Hello All,  
>> 
>>
>> 
>> Is there a way to limit the size of the message that Declude/F-Prot can
>> scan?  We have some customers that are sending 50+ meg files and it is
>> causing our servers to have major issues.  Is there a setting to say skip
>> anything over a certain size?  Either in F-Prot or Declude?  
>> 
>>
>> 
>> We fixed it currently by setting it to OFF for certain domains, but
really
>> want to ban extensions and vulnerabilities for those domains..  
>> 
>>
>> 
>>
>> 
>> Thanks,  
>> 
>> Grant Griffith  
>> 
>> EI8HTLEGS, A Division of ETC  
>> 
>> (812)932-1000  
>> 
>>
>> 
>   
> 
> ---
> This E-mail came from the Declude.Virus mailing list.  To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.Virus".The archives can be found
> at http://www.mail-archive.com. 
> 
>  
> 
> ---
> This E-mail came from the Declude.Virus mailing list.  To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.Virus".The archives can be found
> at http://www.mail-archive.com.
 

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROT

Re: [Declude.Virus] Limit Size of message to be scanned?

2005-07-08 Thread Darrell \([EMAIL PROTECTED])
Grant, 

Here are the links to the messages 


Org - http://www.mail-archive.com/declude.junkmail@declude.com/msg24792.html
Update - 
http://www.mail-archive.com/declude.junkmail@declude.com/msg24977.html 


Hope this helps
Darrell 


---
DLAnalyzer - Comprehensive reporting on Declude Junkmail and Virus.
http://www.invariantsystems.com 

Grant Griffith writes: 

Hey All, 


Is there a known issue with Declude 2.0.6.16 and Imail 8.2?  I recall
reading something a few weeks ago about a possible issue and we did just
upgrade toward the end of last week. 

I scanned the archives, but did not find anything specific. 


Thanks,
Grant Griffith
EI8HTLEGS, A Division of ETC
(812)932-1000 


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Grant Griffith
Sent: Friday, July 08, 2005 9:38 AM
To: Declude.Virus@declude.com
Subject: RE: [Declude.Virus] Limit Size of message to be scanned? 

Thanks Darrell, 

I knew the setting was there somewhere, but kept overlooking it. 


Thanks,
Grant Griffith
EI8HTLEGS, A Division of ETC
(812)932-1000 


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Darrell
([EMAIL PROTECTED])
Sent: Friday, July 08, 2005 9:34 AM
To: Declude.Virus@declude.com
Subject: Re: [Declude.Virus] Limit Size of message to be scanned? 

Grant,  

What I do is set the "Single Message Size" under the domain.  The limit I 
have in place for most of my sites I maintain is between 10MB - 20MB.  

If this is a store and forward server you can set this on the primary domain 

of the server and it affects all of the domains you gateway for.  


Darrell
 
Check out http://www.invariantsystems.com for utilities for Declude And 
Imail.  IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG 

Integration, and Log Parsers.  

  

Grant Griffith writes:  

Darrell,  


How can I do this on the Imail end?  I can limit attachments sent thru Web
Messaging, but not via Outlook or anything else.  At least I can not find
any settings for that.  


Thanks,
Grant Griffith
EI8HTLEGS, A Division of ETC
(812)932-1000
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Darrell
([EMAIL PROTECTED])
Sent: Friday, July 08, 2005 9:13 AM
To: Declude.Virus@declude.com
Subject: Re: [Declude.Virus] Limit Size of message to be scanned?  

Grant,   

Their is nothing native to Declude to prevent that - the only real option 
besides something custom is to limit the size at the imail layer.   


Darrell
 
InvURIBL - Intelligent URL filtering - stops 85% of spam with the default 
configuration.  http://www.invariantsystems.com   



Grant Griffith writes:   


Yep, we had one client send a 50+ and 45+ at the same time.  That is

about

the same time the system locked up.  It is a Dual Pentium 3.6 processors
with at least 2 gig of memory.  I would of hoped it could keep up, but

seems

to be a pattern this week whenever huge emails get sent thru the server,

it
locks up and needs rebooted to fix it.   




How does anyone else handle this?  I would guess there would be a way to

not
scan messages over a certain size   



Thanks,   

Grant Griffith   

EI8HTLEGS, A Division of ETC   

(812)932-1000   

  _ 


From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of John Tolmachoff
(Lists)
Sent: Friday, July 08, 2005 2:05 AM
To: Declude.Virus@declude.com
Subject: RE: [Declude.Virus] Limit Size of message to be scanned?   



50 MB e-mail attachments?   



Youch!   



John T   

eServices For You   




-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Grant Griffith
Sent: Thursday, July 07, 2005 8:36 PM
To: Declude.Virus@declude.com
Subject: [Declude.Virus] Limit Size of message to be scanned?   



Hello All,   




Is there a way to limit the size of the message that Declude/F-Prot can
scan?  We have some customers that are sending 50+ meg files and it is
causing our servers to have major issues.  Is there a setting to say skip
anything over a certain size?  Either in F-Prot or Declude?   




We fixed it currently by setting it to OFF for certain domains, but

really
want to ban extensions and vulnerabilities for those domains..   





Thanks,   

Grant Griffith   

EI8HTLEGS, A Division of ETC   

(812)932-1000   



   


---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".The archives can be found
at http://www.mail-archive.com.  

  


---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".The archive

RE: [Declude.Virus] Limit Size of message to be scanned?

2005-07-08 Thread Grant Griffith
Thanks Darrell,

Guess I will be contacting support ASAP.  I want to beta!

Thanks,
Grant Griffith
EI8HTLEGS, A Division of ETC
(812)932-1000

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Darrell
([EMAIL PROTECTED])
Sent: Friday, July 08, 2005 10:36 AM
To: Declude.Virus@declude.com
Subject: Re: [Declude.Virus] Limit Size of message to be scanned?

Grant, 

Here are the links to the messages 

Org - http://www.mail-archive.com/declude.junkmail@declude.com/msg24792.html
Update - 
http://www.mail-archive.com/declude.junkmail@declude.com/msg24977.html 

Hope this helps
Darrell 

 ---
DLAnalyzer - Comprehensive reporting on Declude Junkmail and Virus.
http://www.invariantsystems.com 

Grant Griffith writes: 

> Hey All, 
> 
> Is there a known issue with Declude 2.0.6.16 and Imail 8.2?  I recall
> reading something a few weeks ago about a possible issue and we did just
> upgrade toward the end of last week. 
> 
> I scanned the archives, but did not find anything specific. 
> 
> Thanks,
> Grant Griffith
> EI8HTLEGS, A Division of ETC
> (812)932-1000 
> 
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On Behalf Of Grant Griffith
> Sent: Friday, July 08, 2005 9:38 AM
> To: Declude.Virus@declude.com
> Subject: RE: [Declude.Virus] Limit Size of message to be scanned? 
> 
> Thanks Darrell, 
> 
> I knew the setting was there somewhere, but kept overlooking it. 
> 
> Thanks,
> Grant Griffith
> EI8HTLEGS, A Division of ETC
> (812)932-1000 
> 
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On Behalf Of Darrell
> ([EMAIL PROTECTED])
> Sent: Friday, July 08, 2005 9:34 AM
> To: Declude.Virus@declude.com
> Subject: Re: [Declude.Virus] Limit Size of message to be scanned? 
> 
> Grant,  
> 
> What I do is set the "Single Message Size" under the domain.  The limit I 
> have in place for most of my sites I maintain is between 10MB - 20MB.  
> 
> If this is a store and forward server you can set this on the primary
domain 
> 
> of the server and it affects all of the domains you gateway for.  
> 
> Darrell
>  
> Check out http://www.invariantsystems.com for utilities for Declude And 
> Imail.  IMail/Declude Overflow Queue Monitoring, SURBL/URI integration,
MRTG 
> 
> Integration, and Log Parsers.  
> 
>   
> 
> Grant Griffith writes:  
> 
>> Darrell,  
>> 
>> How can I do this on the Imail end?  I can limit attachments sent thru
Web
>> Messaging, but not via Outlook or anything else.  At least I can not find
>> any settings for that.  
>> 
>> Thanks,
>> Grant Griffith
>> EI8HTLEGS, A Division of ETC
>> (812)932-1000
>> -Original Message-
>> From: [EMAIL PROTECTED]
>> [mailto:[EMAIL PROTECTED] On Behalf Of Darrell
>> ([EMAIL PROTECTED])
>> Sent: Friday, July 08, 2005 9:13 AM
>> To: Declude.Virus@declude.com
>> Subject: Re: [Declude.Virus] Limit Size of message to be scanned?  
>> 
>> Grant,   
>> 
>> Their is nothing native to Declude to prevent that - the only real option

>> besides something custom is to limit the size at the imail layer.   
>> 
>> Darrell
>>  
>> InvURIBL - Intelligent URL filtering - stops 85% of spam with the default

>> configuration.  http://www.invariantsystems.com   
>> 
>> 
>> Grant Griffith writes:   
>> 
>>> Yep, we had one client send a 50+ and 45+ at the same time.  That is
> about
>>> the same time the system locked up.  It is a Dual Pentium 3.6 processors
>>> with at least 2 gig of memory.  I would of hoped it could keep up, but
>> seems
>>> to be a pattern this week whenever huge emails get sent thru the server,
>> it
>>> locks up and needs rebooted to fix it.   
>>> 
>>> 
>>> 
>>> How does anyone else handle this?  I would guess there would be a way to
>> not
>>> scan messages over a certain size   
>>> 
>>> 
>>> 
>>> Thanks,   
>>> 
>>> Grant Griffith   
>>> 
>>> EI8HTLEGS, A Division of ETC   
>>> 
>>> (812)932-1000   
>>> 
>>>   _ 
>>> 
>>> From: [EMAIL PROTECTED]
>>> [mailto:[EMAIL PROTECTED] On Behalf Of John Tolmachoff
>>> (Lists)
>>> Sent: Friday, July 08, 2005 2:05 AM
>>> To: Declude.Virus@declude.com
>>> Subject: RE: [Declude.Virus] Limit Size of message to be scanned?   
>>> 
>>> 
>>> 
>>> 50 MB e-mail attachments?   
>>> 
>>> 
>>> 
>>> Youch!   
>>> 
>>> 
>>> 
>>> John T   
>>> 
>>> eServices For You   
>>> 
>>> 
>>> 
>>> -Original Message-
>>> From: [EMAIL PROTECTED]
>>> [mailto:[EMAIL PROTECTED] On Behalf Of Grant Griffith
>>> Sent: Thursday, July 07, 2005 8:36 PM
>>> To: Declude.Virus@declude.com
>>> Subject: [Declude.Virus] Limit Size of message to be scanned?   
>>> 
>>> 
>>> 
>>> Hello All,   
>>> 
>>> 
>>> 
>>> Is there a way to limit the size of the message that Declude/F-Prot can
>>> scan?  We have some cust

RE: [Declude.Virus] Limit Size of message to be scanned?

2005-07-08 Thread Grant Griffith
Anyone roll back to Imail 8.15 from 8.2?  Was it an easy step?  Looked at
the Imail archives and guess I will contact support if no one has any ideas.
I need to roll back though until Declude finds a fix.

Thanks,
Grant Griffith
EI8HTLEGS, A Division of ETC
(812)932-1000

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Darrell
([EMAIL PROTECTED])
Sent: Friday, July 08, 2005 10:36 AM
To: Declude.Virus@declude.com
Subject: Re: [Declude.Virus] Limit Size of message to be scanned?

Grant, 

Here are the links to the messages 

Org - http://www.mail-archive.com/declude.junkmail@declude.com/msg24792.html
Update - 
http://www.mail-archive.com/declude.junkmail@declude.com/msg24977.html 

Hope this helps
Darrell 

 ---
DLAnalyzer - Comprehensive reporting on Declude Junkmail and Virus.
http://www.invariantsystems.com 

Grant Griffith writes: 

> Hey All, 
> 
> Is there a known issue with Declude 2.0.6.16 and Imail 8.2?  I recall
> reading something a few weeks ago about a possible issue and we did just
> upgrade toward the end of last week. 
> 
> I scanned the archives, but did not find anything specific. 
> 
> Thanks,
> Grant Griffith
> EI8HTLEGS, A Division of ETC
> (812)932-1000 
> 
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On Behalf Of Grant Griffith
> Sent: Friday, July 08, 2005 9:38 AM
> To: Declude.Virus@declude.com
> Subject: RE: [Declude.Virus] Limit Size of message to be scanned? 
> 
> Thanks Darrell, 
> 
> I knew the setting was there somewhere, but kept overlooking it. 
> 
> Thanks,
> Grant Griffith
> EI8HTLEGS, A Division of ETC
> (812)932-1000 
> 
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On Behalf Of Darrell
> ([EMAIL PROTECTED])
> Sent: Friday, July 08, 2005 9:34 AM
> To: Declude.Virus@declude.com
> Subject: Re: [Declude.Virus] Limit Size of message to be scanned? 
> 
> Grant,  
> 
> What I do is set the "Single Message Size" under the domain.  The limit I 
> have in place for most of my sites I maintain is between 10MB - 20MB.  
> 
> If this is a store and forward server you can set this on the primary
domain 
> 
> of the server and it affects all of the domains you gateway for.  
> 
> Darrell
>  
> Check out http://www.invariantsystems.com for utilities for Declude And 
> Imail.  IMail/Declude Overflow Queue Monitoring, SURBL/URI integration,
MRTG 
> 
> Integration, and Log Parsers.  
> 
>   
> 
> Grant Griffith writes:  
> 
>> Darrell,  
>> 
>> How can I do this on the Imail end?  I can limit attachments sent thru
Web
>> Messaging, but not via Outlook or anything else.  At least I can not find
>> any settings for that.  
>> 
>> Thanks,
>> Grant Griffith
>> EI8HTLEGS, A Division of ETC
>> (812)932-1000
>> -Original Message-
>> From: [EMAIL PROTECTED]
>> [mailto:[EMAIL PROTECTED] On Behalf Of Darrell
>> ([EMAIL PROTECTED])
>> Sent: Friday, July 08, 2005 9:13 AM
>> To: Declude.Virus@declude.com
>> Subject: Re: [Declude.Virus] Limit Size of message to be scanned?  
>> 
>> Grant,   
>> 
>> Their is nothing native to Declude to prevent that - the only real option

>> besides something custom is to limit the size at the imail layer.   
>> 
>> Darrell
>>  
>> InvURIBL - Intelligent URL filtering - stops 85% of spam with the default

>> configuration.  http://www.invariantsystems.com   
>> 
>> 
>> Grant Griffith writes:   
>> 
>>> Yep, we had one client send a 50+ and 45+ at the same time.  That is
> about
>>> the same time the system locked up.  It is a Dual Pentium 3.6 processors
>>> with at least 2 gig of memory.  I would of hoped it could keep up, but
>> seems
>>> to be a pattern this week whenever huge emails get sent thru the server,
>> it
>>> locks up and needs rebooted to fix it.   
>>> 
>>> 
>>> 
>>> How does anyone else handle this?  I would guess there would be a way to
>> not
>>> scan messages over a certain size   
>>> 
>>> 
>>> 
>>> Thanks,   
>>> 
>>> Grant Griffith   
>>> 
>>> EI8HTLEGS, A Division of ETC   
>>> 
>>> (812)932-1000   
>>> 
>>>   _ 
>>> 
>>> From: [EMAIL PROTECTED]
>>> [mailto:[EMAIL PROTECTED] On Behalf Of John Tolmachoff
>>> (Lists)
>>> Sent: Friday, July 08, 2005 2:05 AM
>>> To: Declude.Virus@declude.com
>>> Subject: RE: [Declude.Virus] Limit Size of message to be scanned?   
>>> 
>>> 
>>> 
>>> 50 MB e-mail attachments?   
>>> 
>>> 
>>> 
>>> Youch!   
>>> 
>>> 
>>> 
>>> John T   
>>> 
>>> eServices For You   
>>> 
>>> 
>>> 
>>> -Original Message-
>>> From: [EMAIL PROTECTED]
>>> [mailto:[EMAIL PROTECTED] On Behalf Of Grant Griffith
>>> Sent: Thursday, July 07, 2005 8:36 PM
>>> To: Declude.Virus@declude.com
>>> Subject: [Declude.Virus] Limit Size of message to be scanned?   
>>> 
>>> 
>>> 
>>> Hello A

[Declude.Virus] NetSky and Sasser author sentenced, Microsoft pays up

2005-07-08 Thread Colbeck, Andrew
Title: Message



Well, 
the speculation on whether Microsoft would make good on their bounty to Sven 
Jaschen's "friends" is over.
 
http://www.f-secure.com/weblog/
 
 
Andrew 
8)


RE: [Declude.Virus] NetSky and Sasser author sentenced, Microsoft pays up

2005-07-08 Thread John Tolmachoff \(Lists\)
Title: Message









So the virus writer got a slap on the
wrist. Boy, that will sure send a message to would be virus writers.

 



John T

eServices For You



 



-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On
Behalf Of Colbeck, Andrew
Sent: Friday, July
 08, 2005 11:40 AM
To: Declude.Virus@declude.com
Subject: [Declude.Virus] NetSky
and Sasser author sentenced, Microsoft pays up

 



Well, the speculation on whether Microsoft
would make good on their bounty to Sven Jaschen's "friends" is over.





 





http://www.f-secure.com/weblog/





 





 





Andrew 8)












Re: [Declude.Virus] NetSky and Sasser author sentenced, Microsoft pays up

2005-07-08 Thread Darrell \([EMAIL PROTECTED])
Slap on the wrist and his friends got paid for turning him in...  Looks like 
a win-win for all of them. 

Darrell 

John Tolmachoff (Lists) writes: 


So the virus writer got a slap on the wrist. Boy, that will sure send a
message to would be virus writers. 

  

John T 

eServices For You 

  


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Colbeck, Andrew
Sent: Friday, July 08, 2005 11:40 AM
To: Declude.Virus@declude.com
Subject: [Declude.Virus] NetSky and Sasser author sentenced, Microsoft pays
up 

  


Well, the speculation on whether Microsoft would make good on their bounty
to Sven Jaschen's "friends" is over. 

  

http://www.f-secure.com/weblog/ 

  

  

Andrew 8) 






Check out http://www.invariantsystems.com for utilities for Declude And 
Imail.  IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG 
Integration, and Log Parsers. 



---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".The archives can be found
at http://www.mail-archive.com.


RE: [Declude.Virus] NetSky and Sasser author sentenced, Microsoft pays up

2005-07-08 Thread Dan Horne
So if I write a virus, who wants to turn me in and split the bounty with
me? 

> -Original Message-
> From: [EMAIL PROTECTED] 
> [mailto:[EMAIL PROTECTED] On Behalf Of Darrell 
> ([EMAIL PROTECTED])
> Sent: Friday, July 08, 2005 4:18 PM
> To: Declude.Virus@declude.com
> Subject: Re: [Declude.Virus] NetSky and Sasser author 
> sentenced, Microsoft pays up
> 
> Slap on the wrist and his friends got paid for turning him 
> in...  Looks like a win-win for all of them. 
> 
> Darrell 
> 
> John Tolmachoff (Lists) writes: 
> 
> > So the virus writer got a slap on the wrist. Boy, that will 
> sure send 
> > a message to would be virus writers.
> > 
> >   
> > 
> > John T
> > 
> > eServices For You
> > 
> >   
> > 
> > -Original Message-
> > From: [EMAIL PROTECTED]
> > [mailto:[EMAIL PROTECTED] On Behalf Of 
> Colbeck, Andrew
> > Sent: Friday, July 08, 2005 11:40 AM
> > To: Declude.Virus@declude.com
> > Subject: [Declude.Virus] NetSky and Sasser author 
> sentenced, Microsoft 
> > pays up
> > 
> >   
> > 
> > Well, the speculation on whether Microsoft would make good on their 
> > bounty to Sven Jaschen's "friends" is over.
> > 
> >   
> > 
> > http://www.f-secure.com/weblog/
> > 
> >   
> > 
> >   
> > 
> > Andrew 8)
> > 
>  
> 
> 
>  
> --
> --
> Check out http://www.invariantsystems.com for utilities for 
> Declude And Imail.  IMail/Declude Overflow Queue Monitoring, 
> SURBL/URI integration, MRTG Integration, and Log Parsers. 
> 
> 
> ---
> This E-mail came from the Declude.Virus mailing list.  To 
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.Virus".The archives can be found
> at http://www.mail-archive.com.
> 
---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".The archives can be found
at http://www.mail-archive.com.


RE: [Declude.Virus] NetSky and Sasser author sentenced, Microsoft pays up

2005-07-08 Thread Colbeck, Andrew
Sorry, Dan.  I'll be busy myself.

My wife has told me to write the next doom and gloom virus and release
it.  She intends to use the Tor network to secretly blow the whistle on
me, then turn me in to Microsoft for a fat reward.

I never should have taught that accountant how to use her computer for
more than Excel.

Andrew 8)


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Dan Horne
Sent: Friday, July 08, 2005 1:52 PM
To: Declude.Virus@declude.com
Subject: RE: [Declude.Virus] NetSky and Sasser author sentenced,
Microsoft pays up


So if I write a virus, who wants to turn me in and split the bounty with
me? 

> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On Behalf Of Darrell 
> ([EMAIL PROTECTED])
> Sent: Friday, July 08, 2005 4:18 PM
> To: Declude.Virus@declude.com
> Subject: Re: [Declude.Virus] NetSky and Sasser author 
> sentenced, Microsoft pays up
> 
> Slap on the wrist and his friends got paid for turning him
> in...  Looks like a win-win for all of them. 
> 
> Darrell
> 
> John Tolmachoff (Lists) writes:
> 
> > So the virus writer got a slap on the wrist. Boy, that will
> sure send
> > a message to would be virus writers.
> > 
> >   
> > 
> > John T
> > 
> > eServices For You
> > 
> >   
> > 
> > -Original Message-
> > From: [EMAIL PROTECTED] 
> > [mailto:[EMAIL PROTECTED] On Behalf Of
> Colbeck, Andrew
> > Sent: Friday, July 08, 2005 11:40 AM
> > To: Declude.Virus@declude.com
> > Subject: [Declude.Virus] NetSky and Sasser author
> sentenced, Microsoft
> > pays up
> > 
> >   
> > 
> > Well, the speculation on whether Microsoft would make good on their
> > bounty to Sven Jaschen's "friends" is over.
> > 
> >   
> > 
> > http://www.f-secure.com/weblog/
> > 
> >   
> > 
> >   
> > 
> > Andrew 8)
> > 
>  
> 
> 
>  
> --
> --
> Check out http://www.invariantsystems.com for utilities for
> Declude And Imail.  IMail/Declude Overflow Queue Monitoring, 
> SURBL/URI integration, MRTG Integration, and Log Parsers. 
> 
> 
> ---
> This E-mail came from the Declude.Virus mailing list.  To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.Virus".The archives can be found
> at http://www.mail-archive.com.
> 
---
This E-mail came from the Declude.Virus mailing list.  To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".The archives can be found
at http://www.mail-archive.com.
---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".The archives can be found
at http://www.mail-archive.com.


RE: [Declude.Virus] Limit Size of message to be scanned?

2005-07-08 Thread SSS Tech
Yep, just ran the update for 8.15 and everything went back with no problems.
Did this a month ago and all has been well since then. I too was
experiencing the 8.2 / 2.0.6 issue with consumed resources and having to
reboot. I kept Declude at 2.0.6 and the box has been running fine since the
move back to 8.15.

Tyler

-Original Message-
From: Grant Griffith [mailto:[EMAIL PROTECTED] 
Sent: Friday, July 08, 2005 2:34 PM
To: Declude.Virus@declude.com
Subject: RE: [Declude.Virus] Limit Size of message to be scanned?


Anyone roll back to Imail 8.15 from 8.2?  Was it an easy step?  Looked at
the Imail archives and guess I will contact support if no one has any ideas.
I need to roll back though until Declude finds a fix.

Thanks,
Grant Griffith
EI8HTLEGS, A Division of ETC
(812)932-1000

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Darrell
([EMAIL PROTECTED])
Sent: Friday, July 08, 2005 10:36 AM
To: Declude.Virus@declude.com
Subject: Re: [Declude.Virus] Limit Size of message to be scanned?

Grant, 

Here are the links to the messages 

Org - http://www.mail-archive.com/declude.junkmail@declude.com/msg24792.html
Update - 
http://www.mail-archive.com/declude.junkmail@declude.com/msg24977.html 

Hope this helps
Darrell 

 ---
DLAnalyzer - Comprehensive reporting on Declude Junkmail and Virus.
http://www.invariantsystems.com 

Grant Griffith writes: 

> Hey All,
> 
> Is there a known issue with Declude 2.0.6.16 and Imail 8.2?  I recall 
> reading something a few weeks ago about a possible issue and we did 
> just upgrade toward the end of last week.
> 
> I scanned the archives, but did not find anything specific.
> 
> Thanks,
> Grant Griffith
> EI8HTLEGS, A Division of ETC
> (812)932-1000
> 
> -Original Message-
> From: [EMAIL PROTECTED] 
> [mailto:[EMAIL PROTECTED] On Behalf Of Grant Griffith
> Sent: Friday, July 08, 2005 9:38 AM
> To: Declude.Virus@declude.com
> Subject: RE: [Declude.Virus] Limit Size of message to be scanned?
> 
> Thanks Darrell,
> 
> I knew the setting was there somewhere, but kept overlooking it.
> 
> Thanks,
> Grant Griffith
> EI8HTLEGS, A Division of ETC
> (812)932-1000
> 
> -Original Message-
> From: [EMAIL PROTECTED] 
> [mailto:[EMAIL PROTECTED] On Behalf Of Darrell
> ([EMAIL PROTECTED])
> Sent: Friday, July 08, 2005 9:34 AM
> To: Declude.Virus@declude.com
> Subject: Re: [Declude.Virus] Limit Size of message to be scanned?
> 
> Grant,
> 
> What I do is set the "Single Message Size" under the domain.  The 
> limit I
> have in place for most of my sites I maintain is between 10MB - 20MB.  
> 
> If this is a store and forward server you can set this on the primary
domain 
> 
> of the server and it affects all of the domains you gateway for.
> 
> Darrell
>  
> 
> Check out http://www.invariantsystems.com for utilities for Declude And 
> Imail.  IMail/Declude Overflow Queue Monitoring, SURBL/URI integration,
MRTG 
> 
> Integration, and Log Parsers.
> 
>   
> 
> Grant Griffith writes:
> 
>> Darrell,
>> 
>> How can I do this on the Imail end?  I can limit attachments sent 
>> thru
Web
>> Messaging, but not via Outlook or anything else.  At least I can not 
>> find any settings for that.
>> 
>> Thanks,
>> Grant Griffith
>> EI8HTLEGS, A Division of ETC
>> (812)932-1000
>> -Original Message-
>> From: [EMAIL PROTECTED] 
>> [mailto:[EMAIL PROTECTED] On Behalf Of Darrell
>> ([EMAIL PROTECTED])
>> Sent: Friday, July 08, 2005 9:13 AM
>> To: Declude.Virus@declude.com
>> Subject: Re: [Declude.Virus] Limit Size of message to be scanned?
>> 
>> Grant,   
>> 
>> Their is nothing native to Declude to prevent that - the only real 
>> option

>> besides something custom is to limit the size at the imail layer.   
>> 
>> Darrell
>>  
>> 
>> InvURIBL - Intelligent URL filtering - stops 85% of spam with the default

>> configuration.  http://www.invariantsystems.com   
>> 
>> 
>> Grant Griffith writes:   
>> 
>>> Yep, we had one client send a 50+ and 45+ at the same time.  That is
> about
>>> the same time the system locked up.  It is a Dual Pentium 3.6 
>>> processors with at least 2 gig of memory.  I would of hoped it could 
>>> keep up, but
>> seems
>>> to be a pattern this week whenever huge emails get sent thru the 
>>> server,
>> it
>>> locks up and needs rebooted to fix it.   
>>> 
>>> 
>>> 
>>> How does anyone else handle this?  I would guess there would be a 
>>> way to
>> not
>>> scan messages over a certain size   
>>> 
>>> 
>>> 
>>> Thanks,   
>>> 
>>> Grant Griffith   
>>> 
>>> EI8HTLEGS, A Division of ETC   
>>> 
>>> (812)932-1000   
>>> 
>>>   _ 
>>> 
>>> From: [EMAIL PROTECTED] 
>>> [mailto:[EMAIL PROTECTED] On Behalf Of John 
>>> Tolmachoff
>>> (Lists)
>>> Sent: Friday, July 08, 2005 2:05 AM
>>> To: Declude.V