Re: [Declude.Virus] ban ext not working

2003-06-27 Thread Serge
seems that the messages are not beiing scanned by declude
nothing added to the header
is this possible? or the only possibility is that they are being sent by
imail1 /web messaging ?


---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.


Re: [Declude.Virus] ban ext not working

2003-06-27 Thread R. Scott Perry

seems that the messages are not beiing scanned by declude
nothing added to the header
is this possible? or the only possibility is that they are being sent by
imail1 /web messaging ?
E-mail sent via imail1.exe or web messaging will not get scanned by Declude 
with IMail v7 and earlier (unless you make some changes using the 
DAISYCHAIN option).

   -Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers.
Declude Virus: Catches known viruses and is the leader in mailserver 
vulnerability detection.
Find out what you have been missing: Ask for a free 30-day evaluation.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.


RE: [Declude.Virus] ban ext not working

2003-06-27 Thread Todd Holt
Does V8.0 hand this off to Declude differently?

Todd Holt
Xidix Technologies, Inc
Las Vegas, NV  USA
www.xidix.com


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry
Sent: Friday, June 27, 2003 2:24 PM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.Virus] ban ext not working


seems that the messages are not beiing scanned by declude
nothing added to the header
is this possible? or the only possibility is that they are being sent
by
imail1 /web messaging ?

E-mail sent via imail1.exe or web messaging will not get scanned by
Declude 
with IMail v7 and earlier (unless you make some changes using the 
DAISYCHAIN option).

-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers.
Declude Virus: Catches known viruses and is the leader in mailserver 
vulnerability detection.
Find out what you have been missing: Ask for a free 30-day evaluation.

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.
---
[This E-mail scanned for viruses by Declude Virus
(http://www.declude.com)]


---
[This E-mail scanned for viruses by Declude Virus (http://www.declude.com)]

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.


RE: [Declude.Virus] ban ext not working

2003-06-27 Thread R. Scott Perry

Does V8.0 hand this off to Declude differently?
With IMail v8, web messaging (and IMail1.exe) will send E-mail to Declude 
for scanning.

   -Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers.
Declude Virus: Catches known viruses and is the leader in mailserver 
vulnerability detection.
Find out what you have been missing: Ask for a free 30-day evaluation.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.


Re: [Declude.Virus] ban ext not working

2003-06-27 Thread Serge
OT
How can we verify (using the logs) that the message was sent using Imail1
and/or webmessaging
also, isthe instructions about daisychain available on website? or only in
archive ?

thanks


- Original Message -
From: R. Scott Perry [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Friday, June 27, 2003 9:24 PM
Subject: Re: [Declude.Virus] ban ext not working



 seems that the messages are not beiing scanned by declude
 nothing added to the header
 is this possible? or the only possibility is that they are being sent by
 imail1 /web messaging ?

 E-mail sent via imail1.exe or web messaging will not get scanned by
Declude
 with IMail v7 and earlier (unless you make some changes using the
 DAISYCHAIN option).

 -Scott
 ---
 Declude JunkMail: The advanced anti-spam solution for IMail mailservers.
 Declude Virus: Catches known viruses and is the leader in mailserver
 vulnerability detection.
 Find out what you have been missing: Ask for a free 30-day evaluation.

 ---
 [This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

 ---
 This E-mail came from the Declude.Virus mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.Virus.The archives can be found
 at http://www.mail-archive.com.




---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.


Re: [Declude.Virus] ban ext not working

2003-06-27 Thread Serge
Below is the header
it does say:

Received: from Diaby [216.226.209.71] by cefib.com
  (SMTPD32-7.15) id AC0967A0288; Fri, 27 Jun 2003 18:25:13 +

Doesn't this mean this is NOT an imail/webmessaging mail ?
so why was it not scanned by declude ? no declude virus or junkmail headers
were added



Received: from Diaby [216.226.209.71] by cefib.com
  (SMTPD32-7.15) id AC0967A0288; Fri, 27 Jun 2003 18:25:13 +
From:  [EMAIL PROTECTED]
Subject:  See todays hottest stars in their most intimate moments
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary=--8SXJ1Q6JOLFJSQ
Message-Id: [EMAIL PROTECTED]
Date: Fri, 27 Jun 2003 19:11:25 +
X-RCPT-TO: [EMAIL PROTECTED]
Status: U
X-UIDL: 352739436

8SXJ1Q6JOLFJSQ
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit

htmlbody BGCOLOR=#CC

TABLE WIDTH=600 BORDER=0 CELLPADDING=0 CELLSPACING=0 ALIGN=CENTER

TRTD COLSPAN=3

A HREF=http://www.easy-celebrities.com/index.phtml?1261375220;
TARGET=_blank

IMG
SRC=http://www.easy-celebrities.com/banners/images/generic_celeb_2_01.gif;
WIDTH=600 HEIGHT=28 BORDER=0 ALT=/A/TD

/TR

T

8SXJ1Q6JOLFJSQ
Content-Type: application/x-msdownload; name=15-10-GB.pdf.pif
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename=15-10-GB.pdf.pif

TVqQAAME//8AALgAQAAA
2A4fug4AtAnNIbgBTM0hVGhpcyBwcm9ncmFtIGNhbm5vdCBiZSBydW4gaW4gRE9TIG1v
ZGUuDQ0KJACPY1NsywI9P8sCPT/LAj0/sB4xP88CPT9IHjM/yQI9PyMdNz/eAj0/Ix05
P8kCPT+pHS4/wAI9P8sCPD9xAj0/Ix02P9sCPT9SaWNoywI9PwAAUEUAAEwBAwCQIbY8
AADgAA4BCwEGAAAgAQAAEOAGACABCAAA8AYAABAIQAAAEAIAAAQA


---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.


RE: [Declude.Virus] ban ext not working

2003-06-27 Thread John Tolmachoff \(Lists\)
 Below is the header
 it does say:
 
 Received: from Diaby [216.226.209.71] by cefib.com
   (SMTPD32-7.15) id AC0967A0288; Fri, 27 Jun 2003 18:25:13 +
 
 Doesn't this mean this is NOT an imail/webmessaging mail ?
 so why was it not scanned by declude ? no declude virus or junkmail
headers
 were added
 
 Received: from Diaby [216.226.209.71] by cefib.com
   (SMTPD32-7.15) id AC0967A0288; Fri, 27 Jun 2003 18:25:13 +
 From:  [EMAIL PROTECTED]
 Subject:  See todays hottest stars in their most intimate moments
 MIME-Version: 1.0
 Content-Type: multipart/mixed; boundary=--8SXJ1Q6JOLFJSQ
 Message-Id: [EMAIL PROTECTED]
 Date: Fri, 27 Jun 2003 19:11:25 +
 X-RCPT-TO: [EMAIL PROTECTED]
 Status: U
 X-UIDL: 352739436

Can you find that message in the Imail log, find what the Imail file name is
and post a log snippet of it?

John Tolmachoff MCSE CSSA
Engineer/Consultant
eServices For You
www.eservicesforyou.com


---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.


[Declude.Virus] So Big E detection

2003-06-27 Thread jssubs
Hello. Welcome to the weekend. The weather is fantastic here in Columbus.

I have two scanners running, McAfee and F-Prot. On the McAfee side, I believe I'm 
running the 4.2.60 engine and the 4273 DAT file, but I'm not at the shop where I can 
triple check. F-Prot is catching these So-Big-E [name munged to protect the guilty] 
viruses like a champion, but the McAfee side hasn't detected a single one. Before I 
panic [panic requires a drive in at midnight that I'm not up for tonight], have any 
other McAfee users noticed anything dysfunctional about So Big E detection?

Have I mentioned lately how GREAT it is having redundant scanning? 
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.


RE: [Declude.Virus] So Big E detection

2003-06-27 Thread Patrick Childers

 I have two scanners running, McAfee and F-Prot. On the McAfee 
 side, I believe I'm running the 4.2.60 engine and the 4273 
 DAT file, but I'm not at the shop where I can triple check. 
 F-Prot is catching these So-Big-E [name munged to protect the 
 guilty] viruses like a champion, but the McAfee side hasn't 
 detected a single one. Before I panic [panic requires a drive 
 in at midnight that I'm not up for tonight], have any other 
 McAfee users noticed anything dysfunctional about So Big E detection?
 

I use Mcafee with the 4.2.60 engine/4273 DAT, (was using 4.1.60
yesterday) and both engines were/are catching So Big E. I think you can
avoid the midnight drive and have a drink instead. :-)

~Patrick

---
[This E-mail scanned for viruses by Declude/McAfee]

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.


Re: [Declude.Virus] ban ext not working

2003-06-27 Thread Serge
attached are the 2 part of imail log file, receiving and delivering
too long, to many recepients
maybe thats why it went thru ?

banext did not work (it usualy works).
fprot did not catch bugbear, it does when i resend the same message !
no declude junkmail or virus headers added.

any help, hints, ... appreciated
thanks in advance




- Original Message -
From: John Tolmachoff (Lists) [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Saturday, June 28, 2003 12:20 AM
Subject: RE: [Declude.Virus] ban ext not working


 Below is the header
 it does say:

 Received: from Diaby [216.226.209.71] by cefib.com
   (SMTPD32-7.15) id AC0967A0288; Fri, 27 Jun 2003 18:25:13 +

 Doesn't this mean this is NOT an imail/webmessaging mail ?
 so why was it not scanned by declude ? no declude virus or junkmail
headers
 were added

 Received: from Diaby [216.226.209.71] by cefib.com
   (SMTPD32-7.15) id AC0967A0288; Fri, 27 Jun 2003 18:25:13 +
 From:  [EMAIL PROTECTED]
 Subject:  See todays hottest stars in their most intimate moments
 MIME-Version: 1.0
 Content-Type: multipart/mixed; boundary=--8SXJ1Q6JOLFJSQ
 Message-Id: [EMAIL PROTECTED]
 Date: Fri, 27 Jun 2003 19:11:25 +
 X-RCPT-TO: [EMAIL PROTECTED]
 Status: U
 X-UIDL: 352739436

Can you find that message in the Imail log, find what the Imail file name is
and post a log snippet of it?

John Tolmachoff MCSE CSSA
Engineer/Consultant
eServices For You
www.eservicesforyou.com


---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.



20030627 182419 127.0.0.1   SMTPD (067A0288) [216.226.209.71] helo Diaby
20030627 182419 127.0.0.1   SMTPD (067A0288) [216.226.209.71] MAIL FROM:[EMAIL 
PROTECTED]

20030627 182421 127.0.0.1   SMTPD (067A0288) [216.226.209.71] RCPT TO:[EMAIL 
PROTECTED]
20030627 182421 127.0.0.1   SMTPD (067A0288) [216.226.209.71] RCPT TO:[EMAIL 
PROTECTED]
20030627 182422 127.0.0.1   SMTPD (067A0288) [216.226.209.71] RCPT TO:[EMAIL 
PROTECTED]

20030627 182423 127.0.0.1   SMTPD (067A0288) [216.226.209.71] RCPT TO:[EMAIL 
PROTECTED]
20030627 182424 127.0.0.1   SMTPD (067A0288) [216.226.209.71] RCPT TO:[EMAIL 
PROTECTED]
20030627 182425 127.0.0.1   SMTPD (067A0288) [216.226.209.71] RCPT TO:[EMAIL 
PROTECTED]
20030627 182425 127.0.0.1   SMTPD (067A0288) [216.226.209.71] RCPT TO:[EMAIL 
PROTECTED]
20030627 182426 127.0.0.1   SMTPD (067A0288) [216.226.209.71] RCPT TO:[EMAIL 
PROTECTED]
20030627 182427 127.0.0.1   SMTPD (067A0288) [216.226.209.71] RCPT TO:[EMAIL 
PROTECTED]
20030627 182427 127.0.0.1   SMTPD (067A0288) [216.226.209.71] RCPT TO:[EMAIL 
PROTECTED]
20030627 182428 127.0.0.1   SMTPD (067A0288) [216.226.209.71] RCPT TO:[EMAIL 
PROTECTED]
20030627 182428 127.0.0.1   SMTPD (067A0288) [216.226.209.71] RCPT TO:[EMAIL 
PROTECTED]
20030627 182428 127.0.0.1   SMTPD (067A0288) [216.226.209.71] RCPT TO:[EMAIL 
PROTECTED]
20030627 182429 127.0.0.1   SMTPD (067A0288) [216.226.209.71] RCPT TO:[EMAIL 
PROTECTED]
20030627 182429 127.0.0.1   SMTPD (067A0288) [216.226.209.71] RCPT TO:[EMAIL 
PROTECTED]
20030627 182429 127.0.0.1   SMTPD (067A0288) [216.226.209.71] RCPT TO:[EMAIL 
PROTECTED]
20030627 182429 127.0.0.1   SMTPD (067A0288) [216.226.209.71] RCPT TO:[EMAIL 
PROTECTED]
20030627 182430 127.0.0.1   SMTPD (067A0288) [216.226.209.71] RCPT TO:[EMAIL 
PROTECTED]

20030627 182430 127.0.0.1   SMTPD (067A0288) [216.226.209.71] RCPT TO:[EMAIL 
PROTECTED]
20030627 182430 127.0.0.1   SMTPD (067A0288) [216.226.209.71] RCPT TO:[EMAIL 
PROTECTED]
20030627 182430 127.0.0.1   SMTPD (067A0288) [216.226.209.71] RCPT TO:[EMAIL 
PROTECTED]
20030627 182430 127.0.0.1   SMTPD (067A0288) [216.226.209.71] RCPT TO:[EMAIL 
PROTECTED]
20030627 182431 127.0.0.1   SMTPD (067A0288) [216.226.209.71] RCPT TO:[EMAIL 
PROTECTED]
20030627 182431 127.0.0.1   SMTPD (067A0288) [216.226.209.71] RCPT TO:[EMAIL 
PROTECTED]
20030627 182431 127.0.0.1   SMTPD (067A0288) [216.226.209.71] RCPT TO:[EMAIL 
PROTECTED]
20030627 182431 127.0.0.1   SMTPD (067A0288) [216.226.209.71] RCPT TO:[EMAIL 
PROTECTED]
20030627 182431 127.0.0.1   SMTPD (067A0288) [216.226.209.71] RCPT TO:[EMAIL 
PROTECTED]
20030627 182431 127.0.0.1   SMTPD (067A0288) [216.226.209.71] RCPT TO:[EMAIL 
PROTECTED]
20030627 182431 127.0.0.1   SMTPD (067A0288) [216.226.209.71] RCPT TO:[EMAIL 
PROTECTED]
20030627 182432 127.0.0.1   SMTPD (067A0288) [216.226.209.71] RCPT TO:[EMAIL 
PROTECTED]
20030627 182432 127.0.0.1   SMTPD (067A0288) [216.226.209.71] RCPT TO:[EMAIL 
PROTECTED]
20030627 182432 127.0.0.1   SMTPD (067A0288) [216.226.209.71] RCPT TO:[EMAIL 
PROTECTED]
20030627 182432 127.0.0.1   SMTPD (067A0288) [216.226.209.71] RCPT TO:[EMAIL

RE: [Declude.Virus] So Big E detection

2003-06-27 Thread Dave Marchette
[EMAIL PROTECTED] guess:  Mcafee\Declude is not config'ed to scan through ZIPS.

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
Sent: Friday, June 27, 2003 7:13 PM
To: [EMAIL PROTECTED]
Subject: [Declude.Virus] So Big E detection


Hello. Welcome to the weekend. The weather is fantastic here in Columbus.

I have two scanners running, McAfee and F-Prot. On the McAfee side, I believe I'm 
running the 4.2.60 engine and the 4273 DAT file, but I'm not at the shop where I can 
triple check. F-Prot is catching these So-Big-E [name munged to protect the guilty] 
viruses like a champion, but the McAfee side hasn't detected a single one. Before I 
panic [panic requires a drive in at midnight that I'm not up for tonight], have any 
other McAfee users noticed anything dysfunctional about So Big E detection?

Have I mentioned lately how GREAT it is having redundant scanning? 
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.