[Declude.Virus] OT: Hardware recommendations

2002-06-10 Thread Dan Rapaport

I'm going to be upgrading from an old version of iMail to a current one, 
and go with Declude Virus and either Declude Junkmail or a seperate 
IMGate-MTA type solution.

So I'm about to order up the new imail-Declude machine and it looks to me 
like I can either go with a dual processor P3 (probably 1.2GHz)  with 512MB 
PC133 RAM   or a single P4 2GHz or so with 512MB DDR .  Given that the 
storage will be the same (Promise RAID controller with 2 7200 RPM 80GB 
drives) I wonder if any of you have any thoughts on what would be the 
better choice.

Thanks for any feedback and I hope this is an appropriate topic.  I would 
have gone to the iMail list, but since it will also be running the Declude 
product 

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .



RE: [Declude.Virus] OT: Hardware recommendations

2002-06-10 Thread Madscientist

I recommend going with the single processor. Recovery in the unlikely
event of a main board failure is MUCH easier. Not to mention it will be
easier to support a P4 in future than a P3. You're likely to be IO bound
more than anything else - so concentration on your storage is important
- if you have to make a trade-off, make it in favor of faster storage or
better caching therein.

Also, watch out for your nic... It's a small thing, but the speed and
reliability of that piece can make or break a mail server.

These days memory is cheap... There's almost no excuse any more to have
less than 1G in Ram (IMHO) not because you need it now, but because not
having it is always worse than having it. This can come in handy when
running multiple instances of command line virus scanners or other
programs like Message Sniffer. The extra ram also helps when caching
these programs and their data - if the box doesn't need to hit the hard
drive for this you'll be in great shape.

Along those lines, if you want to get clever (or beg for trouble based
on your point of view) you might even tweak things a bit by putting your
spool directory in a ram-disk... But don't go that far unless you want
this box to carry heavy traffic and your power and equipment are stable
enough that you won't worry about the spool dir going away.

Hope this helps. I'm sure others have different viewpoints to add.

_M

| -Original Message-
| From: [EMAIL PROTECTED] 
| [mailto:[EMAIL PROTECTED]] On Behalf Of Dan Rapaport
| Sent: Monday, June 10, 2002 2:46 PM
| To: [EMAIL PROTECTED]
| Subject: [Declude.Virus] OT: Hardware recommendations
| 
| 
| I'm going to be upgrading from an old version of iMail to a 
| current one, 
| and go with Declude Virus and either Declude Junkmail or 
| a seperate 
| IMGate-MTA type solution.
| 
| So I'm about to order up the new imail-Declude machine and it 
| looks to me 
| like I can either go with a dual processor P3 (probably 
| 1.2GHz)  with 512MB 
| PC133 RAM   or a single P4 2GHz or so with 512MB DDR .  Given 
| that the 
| storage will be the same (Promise RAID controller with 2 7200 
| RPM 80GB 
| drives) I wonder if any of you have any thoughts on what would be the 
| better choice.
| 
| Thanks for any feedback and I hope this is an appropriate 
| topic.  I would 
| have gone to the iMail list, but since it will also be 
| running the Declude 
| product 
| 
| ---
| [This E-mail was scanned for viruses by Declude Virus 
(http://www.declude.com)]

This E-mail came from the Declude.Virus mailing list.  To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and type unsubscribe
Declude.Virus.  You can E-mail [EMAIL PROTECTED] for assistance.
You can visit our web site at http://www.declude.com .


---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .



Re: [Declude.Virus] Outlook 'CR' Vulnerability

2002-06-10 Thread R. Scott Perry


Can anyone tell me what the [Outlook 'CR' Vulnerability] is and where to
fine information on it to give to the customer.   I am running f-prot 3.12
as the scanner



The issue is that there is a header with an illegal character in it (a 
carriage return, rather than the carriage return + linefeed that indicates 
the end of a line). There is no valid reason to have such as character in 
the headers, and it violates RFC specs (and would be reason to fail the 
BADHEADERS test in Declude JunkMail, although that is not currently tested 
for). Having such a character in the headers causes a fork in processing 
the E-mail -- some programs (AV scanners or mail clients) will handle the 
headers correctly, others (Outlook) will not, and will process the E-mail 
very differently (with extra headers that don't really exist, without 
headers that do exist, and even creating non-existent attachments with very 
real viruses). As a result, having such a character bypasses security 
mechanisms.

http://www.openoffice.nl/special_interest/outlookbug.html has more 
information on this issue.
-Scott

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .



RE: [Declude.Virus] OT: Hardware recommendations

2002-06-10 Thread Craig Gittens

Just out of interest: How would you go about putting your spool directory in
a RAMDisk?


Craig.

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Madscientist
Sent: Monday, June 10, 2002 3:17 PM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.Virus] OT: Hardware recommendations


I recommend going with the single processor. Recovery in the unlikely
event of a main board failure is MUCH easier. Not to mention it will be
easier to support a P4 in future than a P3. You're likely to be IO bound
more than anything else - so concentration on your storage is important
- if you have to make a trade-off, make it in favor of faster storage or
better caching therein.

Also, watch out for your nic... It's a small thing, but the speed and
reliability of that piece can make or break a mail server.

These days memory is cheap... There's almost no excuse any more to have
less than 1G in Ram (IMHO) not because you need it now, but because not
having it is always worse than having it. This can come in handy when
running multiple instances of command line virus scanners or other
programs like Message Sniffer. The extra ram also helps when caching
these programs and their data - if the box doesn't need to hit the hard
drive for this you'll be in great shape.

Along those lines, if you want to get clever (or beg for trouble based
on your point of view) you might even tweak things a bit by putting your
spool directory in a ram-disk... But don't go that far unless you want
this box to carry heavy traffic and your power and equipment are stable
enough that you won't worry about the spool dir going away.

Hope this helps. I'm sure others have different viewpoints to add.

_M

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .



RE: [Declude.Virus] OT: Hardware recommendations

2002-06-10 Thread Madscientist

You'll need this:

http://support.ipswitch.com/kb/IM-19990908-DM01.htm

And something like this:

http://support.microsoft.com/default.aspx?scid=kb;EN-US;q257405 (a toy)

Or

http://www.cenatek.com/product_ramdisk.cfm (much better option)

http://www.winsoft.sk/ramdisk.htm (also good I hear)

Hope this helps,
_M

PS: There are a lot of ramdisk options out there as google will show.

| -Original Message-
| From: [EMAIL PROTECTED] 
| [mailto:[EMAIL PROTECTED]] On Behalf Of Craig Gittens
| Sent: Monday, June 10, 2002 3:42 PM
| To: [EMAIL PROTECTED]
| Subject: RE: [Declude.Virus] OT: Hardware recommendations
| 
| 
| Just out of interest: How would you go about putting your 
| spool directory in a RAMDisk?
| 
| 
| Craig.
| 
| -Original Message-
| From: [EMAIL PROTECTED] 
| [mailto:[EMAIL PROTECTED]]On | Behalf Of 
| Madscientist
| Sent: Monday, June 10, 2002 3:17 PM
| To: [EMAIL PROTECTED]
| Subject: RE: [Declude.Virus] OT: Hardware recommendations
| 
| 
| I recommend going with the single processor. Recovery in the 
| unlikely event of a main board failure is MUCH easier. Not to 
| mention it will be easier to support a P4 in future than a 
| P3. You're likely to be IO bound more than anything else - so 
| concentration on your storage is important
| - if you have to make a trade-off, make it in favor of faster 
| storage or better caching therein.
| 
| Also, watch out for your nic... It's a small thing, but the 
| speed and reliability of that piece can make or break a mail server.
| 
| These days memory is cheap... There's almost no excuse any 
| more to have less than 1G in Ram (IMHO) not because you need 
| it now, but because not having it is always worse than having 
| it. This can come in handy when running multiple instances of 
| command line virus scanners or other programs like Message 
| Sniffer. The extra ram also helps when caching these programs 
| and their data - if the box doesn't need to hit the hard 
| drive for this you'll be in great shape.
| 
| Along those lines, if you want to get clever (or beg for 
| trouble based on your point of view) you might even tweak 
| things a bit by putting your spool directory in a ram-disk... 
| But don't go that far unless you want this box to carry heavy 
| traffic and your power and equipment are stable enough that 
| you won't worry about the spool dir going away.
| 
| Hope this helps. I'm sure others have different viewpoints to add.
| 
| _M
| 
| ---
| [This E-mail was scanned for viruses by Declude Virus 
(http://www.declude.com)]

This E-mail came from the Declude.Virus mailing list.  To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and type unsubscribe
Declude.Virus.  You can E-mail [EMAIL PROTECTED] for assistance.
You can visit our web site at http://www.declude.com .


---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .