[Declude.Virus] viruses getting through
Greetings, Over the past 2 days, I have had some viruses get through my Declude Virus, with updated definitions. Has anyone else seen this? Also, when I receive an email and look at the headers of the email, I am not seeing where Declude Virus scanned the message. Does anyone have any suggestions? I am running version 1.82. Thanks, Daniel === Daniel Ivey GCR Company / GCR Online Voice: 434 - 570 - 1765 Fax:434 - 572 - 1981 [EMAIL PROTECTED] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] viruses getting through
Yes, I do have AVAFTERJM ON in the virus.cfg file. One clarification too, when I mentioned that the headers for Declude Virus were not there, there was also no headers for Declude Junkmail either, with I know those are working. I have attached the virus log file for so far today. We have them set to only write on error. Daniel === Daniel Ivey GCR Company / GCR Online Voice: 434 - 570 - 1765 Fax:434 - 572 - 1981 [EMAIL PROTECTED] -Original Message- From: John Tolmachoff (Lists) [mailto:[EMAIL PROTECTED] Sent: Wednesday, June 08, 2005 4:12 PM To: Declude.Virus@declude.com Subject: RE: [Declude.Virus] viruses getting through Declude Virus has no definitions to update. Are you using AFTERJM ON? Logs, what do the logs say? John T eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Daniel Ivey Sent: Wednesday, June 08, 2005 12:54 PM To: 'Declude.Virus@declude.com' Subject: [Declude.Virus] viruses getting through Greetings, Over the past 2 days, I have had some viruses get through my Declude Virus, with updated definitions. Has anyone else seen this? Also, when I receive an email and look at the headers of the email, I am not seeing where Declude Virus scanned the message. Does anyone have any suggestions? I am running version 1.82. Thanks, Daniel === Daniel Ivey GCR Company / GCR Online Voice: 434 - 570 - 1765 Fax:434 - 572 - 1981 [EMAIL PROTECTED] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com. vir0608.log Description: Binary data
[Declude.Virus] OT - Webmail Templates
This is off topic, but if anyone can help me, I would appreciate it. I need some help in customizing the new 8.15 web messaging templates for Imail, specifically, the headerstart.cgi and footer.cgi files. Any help is appreciated. Daniel === Daniel Ivey GCR Company / GCR Online Voice: 434 - 570 - 1765 Fax:434 - 572 - 1981 [EMAIL PROTECTED] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
[Declude.Virus] f-prot update script
Does anyone have an f-prot update script that they wouldn't mind sharing? I have tried one that I found, but never could get it to work. Any help is appreciated. Thanks, Daniel === Daniel Ivey GCR Company / GCR Online Voice: 434 - 570 - 1765 Fax:434 - 572 - 1981 [EMAIL PROTECTED] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] f-prot update script
I have tried using this script. I keep getting an error referring to wget.exe and it doesn't update F-Prot. Daniel === Daniel Ivey GCR Company / GCR Online Voice: 434 - 570 - 1765 Fax:434 - 572 - 1981 [EMAIL PROTECTED] -Original Message- From: Goran Jovanovic [mailto:[EMAIL PROTECTED] Sent: Monday, May 02, 2005 11:02 AM To: Declude.Virus@declude.com Subject: RE: [Declude.Virus] f-prot update script Take a look at: http://www.declude.com/Articles.asp?ID=100 F-Prot for DOS updater - A batch file that automatically updates F-Prot and its virus definitions (old version here), and a Cygwin version, and a complete .ZIPed version. Finally, a Simple version! Goran Jovanovic The LAN Shoppe -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.Virus- [EMAIL PROTECTED] On Behalf Of Daniel Ivey Sent: Monday, May 02, 2005 9:52 AM To: 'Declude.Virus@declude.com' Subject: [Declude.Virus] f-prot update script Does anyone have an f-prot update script that they wouldn't mind sharing? I have tried one that I found, but never could get it to work. Any help is appreciated. Thanks, Daniel === Daniel Ivey GCR Company / GCR Online Voice: 434 - 570 - 1765 Fax:434 - 572 - 1981 [EMAIL PROTECTED] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
[Declude.Virus] OT - exchange 5.5 help
I know this is off topic, but I need a little Exchange 5.5 help. Recently upgraded a client from NT4 with Exchange to Windows 2000 Server SP4 with Exchange 5.5. I am having one problem though. The local server name is server.example.com, which is fine and dandy for the internal network. I need to add a domain suffix for the server for the outside world for sending email. I need the domain suffix to be something like example1.com, where example1.com is a real registered domain. Any help is appreciated and you can email me off list. Daniel === Daniel Ivey GCR Company / GCR Online Voice: 434 - 570 - 1765 Fax:434 - 572 - 1981 [EMAIL PROTECTED] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
[Declude.Virus] F-Prot and viruses
I am using F-Prot with Declude Virus and have had something interesting happen today. I currently have Declude Virus set to delete emails with viruses. However, somehow a user was using webmail on my Imail server and sent a message that contained a virus to a user that has his account on our Exchange server. From looking at the headers of the email, the originating IP address is from a place that has had problems with the MyDoom virus. My question is that if I have Declude Virus set to scan all incoming and outgoing emails, then shouldn't F-Prot check email sent from our Imail server to our Exchange server, since the message is originating from someone on the Imail server? Could this just be a fluke that one got through or does it not check messages sent through Imail Web Messaging? Daniel == Daniel Ivey GCR Company / GCR Online Voice: 434 - 570 - 1765 Fax:434 - 572 - 1981 [EMAIL PROTECTED] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] F-Prot and viruses
Scott, Thanks for the information. Now that I take a closer look at the subject of the email in question, I don't see FW: in front, meaning that it might not have been forwarded. However, the body of the message in question is just a bunch of garbage, so I would think that it was sent on purpose. I will see if I have any further incidents of this reported. Daniel == Daniel Ivey GCR Company / GCR Online Voice: 434 - 570 - 1765 Fax:434 - 572 - 1981 [EMAIL PROTECTED] -Original Message- From: R. Scott Perry [mailto:[EMAIL PROTECTED] Sent: Tuesday, February 03, 2004 2:56 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.Virus] F-Prot and viruses I am using F-Prot with Declude Virus and have had something interesting happen today. I currently have Declude Virus set to delete emails with viruses. However, somehow a user was using webmail on my Imail server and sent a message that contained a virus to a user that has his account on our Exchange server. From looking at the headers of the email, the originating IP address is from a place that has had problems with the MyDoom virus. My first question would be was this E-mail *forwarded* from web messaging (meaning that the virus arrived in the user's mailbox, which shouldn't have happened), or did the user attach a file with the Mydoom virus to an E-mail sent from web messaging? My question is that if I have Declude Virus set to scan all incoming and outgoing emails, then shouldn't F-Prot check email sent from our Imail server to our Exchange server, since the message is originating from someone on the Imail server? Could this just be a fluke that one got through or does it not check messages sent through Imail Web Messaging? With IMail v8, E-mails sent from web messaging should be scanned. The best thing to do in this case is look through the Declude Virus log file, to see what it reports. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you've been missing: Ask about our free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
