Re: [Declude.Virus] How turn off Virus notification
How do I turn off virus notification totally. I am getting too many complaints regarding the volume these days and would just like to turn all notifications off If you delete all the \IMail\Declude\*.eml files that are used by Declude Virus (by default: sender.eml, recip.eml, postmaster.eml and otherpostmaster.eml), Declude Virus will not send out any notifications. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
[Declude.Virus] How turn off Virus notification
Title: Message How do I turn off virus notification totally. I am getting too many complaints regarding the volume these days and would just like to turn all notifications off thanks Harry Vanderzand
Re[2]: [Declude.Virus] Request for per-domain configuration
DC Hmmm...I hate having to turn off the footer for everyone just because of one DC customers. Haven't run into it yet myself, but some people on this list DC will probably run into the problem with having to pass encrypted zips for DC one customer while banning them for everyone else...or similar requests for DC other files... so how about this... DC Add support for domain-specific configuration files. This would allow not DC only removing the footer on a domain basis, but also skipping/banning of DC files, deletion of viruses, and potentially even virus codes (such as the DC F-Prot virus code 8 for suspicious files) to be configurable by domain. Realize this is an old thread but thought I'd throw my $.02 in. Declude JM/AV have both been indispensable especially of late. The only gripe I have is the lack of per domain/user configurations in AV. With 600+ domains, we often have to make the decision between losing a customer or making the entire system less secure. Would really love to see more granular config options especially in the vulnerability and extension categories. -- Best regards, Davidmailto:[EMAIL PROTECTED] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
Re[3]: [Declude.Virus] Request for per-domain configuration
Reply to: David Sullivan Re: [Declude.Virus] Request for per-domain configuration on Wednesday 1:30:38 PM Ditto. We are playing with our remote domain settings manager we have developed for use on our system with Declude. It is really a system for editing whitelist and blacklist in Declude with any browser so domains can be managed for Declude remotely by the administrator or customers of our services. It uses mySQL database and PHP and is working great. At some point I may make this available to other Declude users. It would be nice to extend this to editing domain specific settings within $default$.junkmail files with some of these proposed features.. -- Roger Heath [EMAIL PROTECTED] www.rleeheath.com - Copy of Original Message(s): - DC Hmmm...I hate having to turn off the footer for everyone just because of one DC customers. Haven't run into it yet myself, but some people on this list DC will probably run into the problem with having to pass encrypted zips for DC one customer while banning them for everyone else...or similar requests for DC other files... so how about this... DC Add support for domain-specific configuration files. This would allow not DC only removing the footer on a domain basis, but also skipping/banning of DC files, deletion of viruses, and potentially even virus codes (such as the DC F-Prot virus code 8 for suspicious files) to be configurable by domain. DS Realize this is an old thread but thought I'd throw my $.02 in. DS Declude JM/AV have both been indispensable especially of late. The DS only gripe I have is the lack of per domain/user configurations in AV. DS With 600+ domains, we often have to make the decision between losing a DS customer or making the entire system less secure. Would really love DS to see more granular config options especially in the vulnerability DS and extension categories. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
Re: [Declude.Virus] Imail 8.1
Are there any issues between Declude antivirus or junkmail and Imail 8.1 we need to be aware of or address if/when we choice to upgrade? I assume not, but since Ipswitch did not invite us to the IMail v8.1 beta, I can't answer for certain. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
[Declude.Virus] Imail 8.1
Scott: Are there any issues between Declude antivirus or junkmail and Imail 8.1 we need to be aware of or address if/when we choice to upgrade? Thanks, John --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
[Declude.Virus] Current interim release
What is the link for the current interim Declude AV download? I know I should know this, but I can't find it. :(( I want to upgrade to catch the .RAR encrypted files too. Thank you, David http://www.orcsweb.com/ Powerful Web Hosting Solutions #1 in Service and Support --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
Re: [Declude.Virus] Current interim release
What is the link for the current interim Declude AV download? I know I should know this, but I can't find it. :(( I want to upgrade to catch the .RAR encrypted files too. http://www.declude.com/interim . -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
Re: [Declude.Virus] Current interim release
http://www.declude.com/interim/ Greetings, Uwe -Ursprüngliche Nachricht- Von: David [EMAIL PROTECTED] An: [EMAIL PROTECTED] Gesendet: Mittwoch, 31. März 2004 23:23 Betreff: [Declude.Virus] Current interim release What is the link for the current interim Declude AV download? I know I should know this, but I can't find it. :(( I want to upgrade to catch the .RAR encrypted files too. Thank you, David http://www.orcsweb.com/ Powerful Web Hosting Solutions #1 in Service and Support --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
Re: [Declude.Virus] Current interim release
Thanks Scott and Uwe. I will keep this in file it this time! :( Thank you, David http://www.orcsweb.com/ Powerful Web Hosting Solutions #1 in Service and Support --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
Re: [Declude.Virus] Imail 8.1
I assume not, but since Ipswitch did not invite us to the IMail v8.1 beta, I can't answer for certain. ooo those dirty rats! probly because their anti-spam setup is looks like Fisher-Price stuff compared to Declude :-) Rick --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
[Declude.Virus] Using a BitDefender scanner
The announcement of IMail 8.1 adds another anti-virus option using BitDefender and a quick scan of the Declude Virus Manual shows an entry for BitDefender. Does anyone have any experiences with BitDefender as a scanner for Declude? It looks like the BitDefender Free Edition includes the command line scanner and excludes on-demand scanning. Just what's needed for this application. Regards, Brad Morgan --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
Re: [Declude.Virus] Imail 8.1
since I upgraded to 8.1 I now get double enteries added to the FOOTER botton of each incomming email outgoing emails seem to be OK GLOBAL.CFG WEIGHT-F weightrange xx -1000 1000 $default$.junkmail WEIGHT-F FOOTER %CR%[ scanned for spam to: %ALLRECIPS% %INOROUT% http://www.%LOCALHOST% on %DATE% at %TIME%-0500et. ]%CR% and this line also is added twice Virus.cfg FOOTER %CR%[ scanned for viruses to: %ALLRECIPS% %INOROUT% http://www.%LOCALHOST% on %DATE% at %TIME%-0500et. ]%CR% Sincerely, William J. Baumbach II [EMAIL PROTECTED] 9975 Pennsylvania Ave. Manassas, Va. 20110-2028 Ph: 703-367-7900 ext:1708 Fax: 703-691-0946 - - Original Message - From: R. Scott Perry [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Wednesday, March 31, 2004 2:55 PM Subject: Re: [Declude.Virus] Imail 8.1 Are there any issues between Declude antivirus or junkmail and Imail 8.1 we need to be aware of or address if/when we choice to upgrade? I assume not, but since Ipswitch did not invite us to the IMail v8.1 beta, I can't answer for certain. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com. [ scanned for spam to: [EMAIL PROTECTED] incoming http://www.DcMetroNet.com on 03/31/2004 at 14:58:10-0500et. ] [ scanned for viruses to: [EMAIL PROTECTED] incoming http://www.DcMetroNet.com on 03/31/2004 at 14:58:13-0500et. ] [ scanned for spam to: [EMAIL PROTECTED] outgoing http://www.DcMetroNet.com on 03/31/2004 at 20:17:45-0500et. ] This email message is for the sole use of the intended recipient(s) and may contain confidential and privileged information. Any unauthorized review, use, disclosure or distribution of this email is prohibited. If you are not the intended recipient, please contact the sender and destroy all paper and electronic copies of this message. [ scanned for viruses to: [EMAIL PROTECTED] outgoing http://www.DcMetroNet.com on 03/31/2004 at 20:17:48-0500et. ] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
Re: [Declude.Virus] Imail 8.1
since I upgraded to 8.1 I now get double enteries added to the FOOTER botton of each incomming email It looks like IMail may be running Declude once for each recipient (it looks like you are using a copyall account). Do you have the IMail and Declude log file entries for an E-mail with the double footers? -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
Re: [Declude.Virus] Netsky.P Occasionally Slips through?
Actually, I am running the newest F-Prot, and they're still slipping through. Winzip opens these files just fine as well, and Symantec Corp seems to be able to scan and detect the issue without any problems. They keep rolling in, makes me a little nervous, and customers sure hate it. I'd block the suspicious ones from F-Prot, but I just know people are tossing around macro'd XLS and DOCs all the time. Jonathan At 06:44 AM 3/30/2004, you wrote: I sent one. There have been several, not sure if the one I sent is indicative of all of them, but it's the only one I could easily get out of a local quarantine. A standard copy of pkunzip.exe won't extract the virus from the .ZIP file you sent, so it is probably corrupt. I would recommend upgrading to the latest version of F-Prot -- I believe that they came out with a new version to address .ZIP files like this one. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
Re: [Declude.Virus] Using a BitDefender scanner
Brad, I've been testing all sorts of scanners and I couldn't get the free versions of BitDefender to work. That doesn't mean that it won't, but you will have to play around with it and kind of know what you are doing unless someone else on this list knows what's up and is generous enough to share what they have learned. Matt Brad Morgan wrote: The announcement of IMail 8.1 adds another anti-virus option using BitDefender and a quick scan of the Declude Virus Manual shows an entry for BitDefender. Does anyone have any experiences with BitDefender as a scanner for Declude? It looks like the BitDefender Free Edition includes the command line scanner and excludes on-demand scanning. Just what's needed for this application. Regards, Brad Morgan --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com. -- = MailPure custom filters for Declude JunkMail Pro. http://www.mailpure.com/software/ = --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
[Declude.Virus] Scanner Efficiency Olympics
I tested a bunch of AV scanners with Declude trying to figure out what the most efficient scanners were. I tested for both the time from start to completion, and also the average and peak processor utilization of the first instance as tracked by performance monitor. Note that the longer that the process lives, the more likely it is to be tracked by performance monitor and the higher the processor utilization. The times come from Declude logs at debug level. I tested 8 different scanners; F-Prot, AVG, McAfee, ClamAV, BitDefender, eTrust, Sophos and Kaspersky. Here's what I found for those that were worth tracking or capable of being tracked: Scanner Avg. TimeAvg.Processor% Peak% F-Prot...0.1 seconds...0.482%.4.688% AVG..0.5 seconds...0.934%52.316% McAfee...0.6 seconds...0.900%73.433% ClamAV...1.0 seconds...2.303%...100.000% F-Prot is amazing. If this was a horse race, they won by 20 lengths. I formerly thought that AVG was inefficient and inappropriate for mail server virus scanning, but they pretty much share the second spot with McAfee, maybe even nudging them out by a hair. ClamAV was tested with Clamd running, and while it doesn't come close to the other three, it outperforms the other 4 virus scanners that I tested. Note that in reality it shouldn't take even a half second to scan a short mail file, and the times shown are more so a reflection of both scanning and something else that's going on (who knows). On larger files the difference in time almost disappears. Longer times do though increase contention on busy systems and should be avoided whenever possible. Now for the dogs... Kaspersky - It takes 3.0 seconds for this scanner to complete, no clue as to why. Although the stats aren't shown, it was obvious that it was noticeably less processor efficient than the ones indicated above and therefore it isn't a good candidate for command line mail scanning unless you have plenty of extra processor capacity and no plans on increasing traffic. Sophos - Takes 2.0 seconds to complete a scan, and was noticeably less processor efficient than the top 4 so I didn't bother getting stats. On install, the real-time component was immediately started and turning this off was not intuitive, nor was the updating mechanism (works as a client/server installation). eTrust - Formerly VET, now owned by Computer Associates and sold as a replacement for their Inoculate product line. I couldn't get Declude to detect a return code. Customer service refused to provide direction/confirmation and indicated that it wasn't multi-processor capable. Seemed to be a very fast scanner though. BitDefender - DOS version gave me page faults when called from Win2K. Free Windows version didn't respond to a command line configuration. File Server version installed a real-time component without an option to not install it, and it started it immediately which conflicted with NAV. The uninstall process tool about 10 minutes to complete because the processors were pegged due to the conflict. The software looked nice, though it is expensive if this is the version that is necessary. I didn't care to test it after experiencing the installation/conflict issue. I skipped over some of the other scanners because they weren't listed with a 'report' configuration, though some of them might be contenders aside from the lack of functionality. The bottom line is that F-Prot should be the default choice for Declude as a primary scanner, and it seems like there are only two scanners that one might consider for a second scanner; AVG or McAfee. Beyond that, if you are at all concerned about speed, efficiency, and reporting capabilities, there doesn't seem to be any good choices. The fact though that F-Prot spanks everyone suggests that even AVG and McAfee have a lot of room for improvement. Matt -- = MailPure custom filters for Declude JunkMail Pro. http://www.mailpure.com/software/ = --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
