Re: [Declude.Virus] Problem with FreeMail
>Why did these get a Freemail weight of 4? [responded to on Declude JunkMail mailing list] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
Re: MISSING_REVERSE_DNS:Re: [Declude.Virus]Decludev1.35released
>Shouldn't declude.exe be in the Imail folder instead of the declude folder? Yes -- that is the problem. Good catch. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
[Declude.Virus] Problem with FreeMail
Why did these get a Freemail weight of 4? 01/30/2002 15:24:40 Q6475032 BADHEADERS:4 SPAMHEADERS:4 nFREEMAIL:4 . Total weight = 12 01/30/2002 15:24:40 Q6475032 Msg failed WEIGHT10 (Weight of 12 exceeds the limit of 10.). 01/30/2002 15:24:40 Q6475032 Subject: omain Transfer Request for xxx 01/30/2002 15:24:40 Q6475032 From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] 01/30/2002 15:24:40 Q6475032 Message FAILED: Deleting message! 01/30/2002 15:24:41 Q6475148 BADHEADERS:4 SPAMHEADERS:4 nFREEMAIL:4 . Total weight = 12 01/30/2002 15:24:41 Q6475148 Msg failed WEIGHT10 (Weight of 12 exceeds the limit of 10.). 01/30/2002 15:24:41 Q6475148 Subject: omain Transfer Request for xxx 01/30/2002 15:24:41 Q6475148 From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] 01/30/2002 15:24:41 Q6475148 Message FAILED: Deleting message! Global Config: FREEMAILfromfilex:\imail\declude\freemail.lst x x 4 0 FreeMail.lst: @yahoo.com @hotmail.com @excite.com Running Version 1.35 Thanks, Don Brown - Dallas, Texas USA Internet Concepts, Inc. [EMAIL PROTECTED] http://www.inetconcepts.net PGP Key ID: 04C99A55 (972) 788-2364 Fax: (972) 788-5049 Providing Internet Solutions Worldwide - An eDataWeb Affiliate --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
Re: MISSING_REVERSE_DNS:Re: [Declude.Virus] Decludev1.35released
Thank you Scott! I overlooked your directions, and forgot, about the Declude.exe in the \Imail directory. I was only focusing on the file in the Declude folder. Emily Gossett -- Original Message -- From: "Emily Gossett" <[EMAIL PROTECTED]> Reply-To: <[EMAIL PROTECTED]> Date: Wed, 30 Jan 2002 15:18:46 -0600 Am I missing the bus here? I deleted "declude.exe" from my Declude folder, I copied the "declude.exe" from the link in this email and it is still coming up saying that I am running v1.34. Again, I tried executing it and stopping and starting the SMTP service. Emily Gossett -- Original Message -- From: "R. Scott Perry" <[EMAIL PROTECTED]> Reply-To: [EMAIL PROTECTED] Date: Wed, 30 Jan 2002 16:06:30 -0500 >I copied the v.1.35 executable into my Declude directory and sent >myself a test virus from the Declude website and it is still >noting version 1.34. I then went ahead and executed the >declude.exe and stopped and started the SMTP service. Any >suggestions as to why it is not stating that I am running v1.35. You'll need to first delete ALL copies of Declude.exe from the mail server. Then, download the Declude.exe file (from http://www.declude.com/virus/manual.htm ), and place it in the \IMail\ directory. Then, you will be running 1.35. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
Re[2]: MISSING_REVERSE_DNS:Re: [Declude.Virus] Decludev1.35released
Hi Emily, make sure you are deleting it out of the \IMAIL\ folder (not the \IMAIL\DECLUDE\ folder... AND then make sure you put the NEW 1.35 version into your \IMAIL\ folder (NOT the \imail\declude\ folder). Maybe you are doing this but from what you say below kind of makes me think you are doing this out of your \imail\declude\ folder. Also, Scott said to do this a few e-mails ago... see below. -jason - - - - - - - - - - - - - - - - - - > Wednesday, January 30, 2002, 3:18:46 PM, you wrote: EG> Am I missing the bus here? I deleted "declude.exe" from my EG> Declude folder, I copied the "declude.exe" from the link in this EG> email and it is still coming up saying that I am running v1.34. EG> Again, I tried executing it and stopping and starting the SMTP EG> service. - - - - - - - - - - - - - - - - - - > Wednesday, January 30, 2002, 3:06:30 PM, you wrote: RSP> Then, download the Declude.exe file (from RSP> http://www.declude.com/virus/manual.htm ), and place it in the \IMail\ RSP> directory. Then, you will be running 1.35. RSP> -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
Re: MISSING_REVERSE_DNS:Re: [Declude.Virus]Decludev1.35released
Shouldn't declude.exe be in the Imail folder instead of the declude folder? -Butch *** REPLY SEPARATOR *** On 1/30/2002 at 4:24 PM R. Scott Perry wrote: >>Am I missing the bus here? I deleted "declude.exe" from my >>Declude folder, I copied the "declude.exe" from the link in this >>email and it is still coming up saying that I am running v1.34. >>Again, I tried executing it and stopping and starting the SMTP >>service. > >Maybe you need to hit the Refresh button in your browser? If it shows a >date earlier than January 29 at the top of the page, your browser is using >an old page. > >If you're still having troubles, you can link directly to >http://www.declude.com/release/135/declude.exe . > -Scott > >--- >[This E-mail was scanned for viruses by Declude Virus >(http://www.declude.com)] > >This E-mail came from the Declude.Virus mailing list. To >unsubscribe, just send an E-mail to [EMAIL PROTECTED], and >type "unsubscribe Declude.Virus". You can E-mail >[EMAIL PROTECTED] for assistance. You can visit our web >site at http://www.declude.com . --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
Re: MISSING_REVERSE_DNS:Re: [Declude.Virus]Decludev1.35released
>Am I missing the bus here? I deleted "declude.exe" from my >Declude folder, I copied the "declude.exe" from the link in this >email and it is still coming up saying that I am running v1.34. >Again, I tried executing it and stopping and starting the SMTP >service. Maybe you need to hit the Refresh button in your browser? If it shows a date earlier than January 29 at the top of the page, your browser is using an old page. If you're still having troubles, you can link directly to http://www.declude.com/release/135/declude.exe . -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
Re: MISSING_REVERSE_DNS:Re: [Declude.Virus] Decludev1.35released
Am I missing the bus here? I deleted "declude.exe" from my Declude folder, I copied the "declude.exe" from the link in this email and it is still coming up saying that I am running v1.34. Again, I tried executing it and stopping and starting the SMTP service. Emily Gossett -- Original Message -- From: "R. Scott Perry" <[EMAIL PROTECTED]> Reply-To: [EMAIL PROTECTED] Date: Wed, 30 Jan 2002 16:06:30 -0500 >I copied the v.1.35 executable into my Declude directory and sent >myself a test virus from the Declude website and it is still >noting version 1.34. I then went ahead and executed the >declude.exe and stopped and started the SMTP service. Any >suggestions as to why it is not stating that I am running v1.35. You'll need to first delete ALL copies of Declude.exe from the mail server. Then, download the Declude.exe file (from http://www.declude.com/virus/manual.htm ), and place it in the \IMail\ directory. Then, you will be running 1.35. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
Re: MISSING_REVERSE_DNS:Re: [Declude.Virus] Decludev1.35released
>I copied the v.1.35 executable into my Declude directory and sent >myself a test virus from the Declude website and it is still >noting version 1.34. I then went ahead and executed the >declude.exe and stopped and started the SMTP service. Any >suggestions as to why it is not stating that I am running v1.35. You'll need to first delete ALL copies of Declude.exe from the mail server. Then, download the Declude.exe file (from http://www.declude.com/virus/manual.htm ), and place it in the \IMail\ directory. Then, you will be running 1.35. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
Re: MISSING_REVERSE_DNS:Re: [Declude.Virus] Declude v1.35released
I copied the v.1.35 executable into my Declude directory and sent myself a test virus from the Declude website and it is still noting version 1.34. I then went ahead and executed the declude.exe and stopped and started the SMTP service. Any suggestions as to why it is not stating that I am running v1.35. Example: Headers: Received: from www.declude.com [207.174.233.121] by lib.naperville.il.us (SMTPD32-7.05) id AE5A4D01DA; Wed, 30 Jan 2002 14:58:02 -0600 X-Web-Originating-IP: 207.32.153.133 Message-Id: <4.3.2.7.0.20001102202253.00adb610@localhost> X-Mailer: QUALCOMM Windows Eudora Version 4.3.2 Date: Thu, 02 Nov 2000 20:23:17 -0500 From: "WebMaster" <[EMAIL PROTECTED]> To: "User" <[EMAIL PROTECTED]> Subject: Test eicar.com file [eicarnoquote] Mime-Version: 1.0 Content-Type: multipart/mixed; BounDary="=_307115168==_" Number of recipients: 1 Declude version: 1.34 Emily Gossett -- Original Message -- From: "R. Scott Perry" <[EMAIL PROTECTED]> Reply-To: [EMAIL PROTECTED] Date: Wed, 30 Jan 2002 10:53:17 -0500 >Where do we obtain the new release, Declude v1.35. Do you just >run the executable to update? You can always find the latest version at http://www.declude.com/virus/manual.htm . All you need to do is replace the .exe file; you don't even need to run it. However, note that there is an issue that has been reported with v1.35 where certain features may not work (ones that will not be in the new Lite version, such as BANCLSID). We should have a new release out later today to take care of that. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
Re: MISSING_REVERSE_DNS:Re: [Declude.Virus] Kudos from Customers!!
No. That is not what it means. We notify the intended recipient (and include the headers) whenever we catch a virus or quarantine an e-mail and attachment. Both the email and the attachment are quarantined. Wednesday, January 30, 2002, 1:38:26 PM, gf <[EMAIL PROTECTED]> wrote: g> Do you mean that is it possible to quarantine just the attachments and let g> the message to be delivered? g> If yes how can I apply this function? g> Thank you g> Giuseppe g> - Original Message - g> From: "Don Brown" <[EMAIL PROTECTED]> g> To: <[EMAIL PROTECTED]> g> Sent: Wednesday, January 30, 2002 8:14 PM g> Subject: [Declude.Virus] Kudos from Customers!! >> I just thought I would share this with the group. It is little things >> like this that can really make my day. >> >> Below is one, of many, unsolicited kudos from customers, which is a >> direct result of running Declude. >> >> This one is particular to quarantining attachments, which helped us >> block the new "party" virus until the virus companies had identified >> it and incorporated its signature into the definition file. >> >> " Not 2 or 3 hours ago Mark and I talked about how we appreciated the g> service >> you provide in helping guard against viruses. You do what you think is >> best. Thanks again " >> >> >> >> >> Don Brown - Dallas, Texas USA Internet Concepts, Inc. >> [EMAIL PROTECTED] http://www.inetconcepts.net >> PGP Key ID: 04C99A55 (972) 788-2364 Fax: (972) 788-5049 >> Providing Internet Solutions Worldwide - An eDataWeb Affiliate >> >> >> --- >> [This E-mail was scanned for viruses by Declude Virus g> (http://www.declude.com)] >> >> This E-mail came from the Declude.Virus mailing list. To >> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and >> type "unsubscribe Declude.Virus". You can E-mail >> [EMAIL PROTECTED] for assistance. You can visit our web >> site at http://www.declude.com . >> = >> [This message has been scanned for viruses and it is virus-free] >> [Questo messaggio e' stato analizzato ed e' esente da virus] >> >> g> = g> [This message has been scanned for viruses and it is virus-free] g> [Questo messaggio e' stato analizzato ed e' esente da virus] g> --- g> [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] g> This E-mail came from the Declude.Virus mailing list. To g> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and g> type "unsubscribe Declude.Virus". You can E-mail g> [EMAIL PROTECTED] for assistance. You can visit our web g> site at http://www.declude.com . Don Brown - Dallas, Texas USA Internet Concepts, Inc. [EMAIL PROTECTED] http://www.inetconcepts.net PGP Key ID: 04C99A55 (972) 788-2364 Fax: (972) 788-5049 Providing Internet Solutions Worldwide - An eDataWeb Affiliate --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
Re: [Declude.Virus] [Declude.JunkMail] Declude v1.35 virus not banning files
>I have updated to Declude 1.35 and my virus.cfg file contains the following >lines: > >BANEXT scr >BANEXT pif >BANEXT com >BANEXT exe >BANEXT vbs > >However, when I send a message (from an outside account) containing a .exe >attachment. The attachment is scanned, then sent to me normally. > >Why is it not banned? It should be banned. If you use the debug mode (change the "LOGLEVEL LOW" line in \IMail\Declude\virus.cfg to "LOGLEVEL DEBUG"), and then send an .exe file through, and then set it back to "LOGLEVEL LOW", I can take a look at the log file to see what is happening. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
