Re: [Declude.JunkMail] 2001 Virus got past declude
Kevin, It's my understanding that newer versions of Smartermail do not require the file to have the "X" prepended. When the user requeues the message do you drop it into the smartermail spool or the declude proc directory? In order for it to be rescanned by Declude you need to drop it into the proc folder. Also, there is no way to the best of my knowledge to say just virus process this requeued message. Maybe you can (on the requeue process) append somethign to the message that Declude Junkmail will force it to be whitelisted. THis way it wont be held again but will get processed by declude virus. Darrell Check out http://www.invariantsystems.com for utilities for Declude And Imail. IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG Integration, and Log Parsers. - Original Message - From: Kevin Bilbee To: JunkMail Declude Sent: Thursday, November 09, 2006 2:42 PM Subject: [Declude.JunkMail] 2001 Virus got past declude I know why the virus got past Declude but I would like to know how to stop it in the future. We have the AFTERJUNKMAIL directive on. So the message was trapped as spam and then when the user re-queued the message it was delivered to the users mailbox. Is there a way to get Declude to virus scan messages that have been re-queued and not do the spam checks? What I am unclear on is how Declude interacts with SmarterMail This is what I think happens. 1. SmarterMail 3.x receives a message and places it into the proc folder for Declude to process it 2. On HOLD action Declude moves the message to the hold folder 3. A message is re-queued into the SmarterMail spool folder with an “X” pre-prepended to the file name. 4. SmarterMail then delivers the message to the mailbox Does Declude ever see a message that has been placed back into the SmarterMail spool? Should I be placing these messages back into the proc folder for Declude to move them to the spool folder I would like to see Declude virus scan all message that are not deleted by JunkMail even if they are held. Kevin Bilbee---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com. ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com.
RE: [Declude.JunkMail] 2001 Virus got past declude
I was afraid of that. It would be great to be able to re-queue and only virus scan or better yet virus can all message that do not get deleted by junkmail including held messages. Then if HELD and VIRUS the hold as virus not as spam. Kevin Bilbee From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darrell ([EMAIL PROTECTED]) Sent: Thursday, November 09, 2006 12:57 PM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] 2001 Virus got past declude Kevin, It's my understanding that newer versions of Smartermail do not require the file to have the X prepended. When the user requeues the message do you drop it into the smartermail spool or the declude proc directory? In order for it to be rescanned by Declude you need to drop it into the proc folder. Also, there is no way to the best of my knowledge to say just virus process this requeued message. Maybe you can (on the requeue process) append somethign to the message that Declude Junkmail will force it to be whitelisted. THis way it wont be held again but will get processed by declude virus. Darrell Check out http://www.invariantsystems.com for utilities for Declude And Imail. IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG Integration, and Log Parsers. - Original Message - From: Kevin Bilbee To: JunkMail Declude Sent: Thursday, November 09, 2006 2:42 PM Subject: [Declude.JunkMail] 2001 Virus got past declude I know why the virus got past Declude but I would like to know how to stop it in the future. We have the AFTERJUNKMAIL directive on. So the message was trapped as spam and then when the user re-queued the message it was delivered to the users mailbox. Is there a way to get Declude to virus scan messages that have been re-queued and not do the spam checks? What I am unclear on is how Declude interacts with SmarterMail This is what I think happens. 1. SmarterMail 3.x receives a message and places it into the proc folder for Declude to process it 2. On HOLD action Declude moves the message to the hold folder 3. A message is re-queued into the SmarterMail spool folder with an “X” pre-prepended to the file name. 4. SmarterMail then delivers the message to the mailbox Does Declude ever see a message that has been placed back into the SmarterMail spool? Should I be placing these messages back into the proc folder for Declude to move them to the spool folder I would like to see Declude virus scan all message that are not deleted by JunkMail even if they are held. Kevin Bilbee --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com.
Re: [Declude.JunkMail] 2001 Virus got past declude
Kevin, Since messages that are being held are not going to be immediately moved out of that folder (like actively being processed messages), why don't you have your on-access virus scanner monitor the hold directory. This way the messages will be scanned and deleted if infected. Dean On 11/9/06, Kevin Bilbee [EMAIL PROTECTED] wrote: I was afraid of that. It would be great to be able to re-queue and only virus scan or better yet virus can all message that do not get deleted by junkmail including held messages. Then if HELD and VIRUS the hold as virus not as spam. Kevin Bilbee From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darrell ([EMAIL PROTECTED]) Sent: Thursday, November 09, 2006 12:57 PM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] 2001 Virus got past declude Kevin, It's my understanding that newer versions of Smartermail do not require the file to have the X prepended. When the user requeues the message do you drop it into the smartermail spool or the declude proc directory? In order for it to be rescanned by Declude you need to drop it into the proc folder. Also, there is no way to the best of my knowledge to say just virus process this requeued message. Maybe you can (on the requeue process) append somethign to the message that Declude Junkmail will force it to be whitelisted. THis way it wont be held again but will get processed by declude virus. Darrell Check out http://www.invariantsystems.com for utilities for Declude And Imail. IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG Integration, and Log Parsers. - Original Message - From: Kevin Bilbee To: JunkMail Declude Sent: Thursday, November 09, 2006 2:42 PM Subject: [Declude.JunkMail] 2001 Virus got past declude I know why the virus got past Declude but I would like to know how to stop it in the future. We have the AFTERJUNKMAIL directive on. So the message was trapped as spam and then when the user re-queued the message it was delivered to the users mailbox. Is there a way to get Declude to virus scan messages that have been re-queued and not do the spam checks? What I am unclear on is how Declude interacts with SmarterMail This is what I think happens. 1. SmarterMail 3.x receives a message and places it into the proc folder for Declude to process it 2. On HOLD action Declude moves the message to the hold folder 3. A message is re-queued into the SmarterMail spool folder with an X pre-prepended to the file name. 4. SmarterMail then delivers the message to the mailbox Does Declude ever see a message that has been placed back into the SmarterMail spool? Should I be placing these messages back into the proc folder for Declude to move them to the spool folder I would like to see Declude virus scan all message that are not deleted by JunkMail even if they are held. Kevin Bilbee --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. -- __ Dean Lawrence, CIO/Partner Internet Data Technology 888.GET.IDT1 ext. 701 * fax: 888.438.4381 http://www.idatatech.com/ Corporate Internet Development and Marketing Specialists --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
