RE: [Declude.Virus] Virus notifications
I meant the postmaster notifications when a virus is caught, but it magically started working right after I sent that message. I didn't intentionally do anything to fix it, just looked around in the config files without making any changes. Scary. Thanks for trying to help, Dan -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Gary Steiner Sent: Wednesday, March 28, 2007 9:16 PM To: declude.virus@declude.com Subject: re: [Declude.Virus] Virus notifications What do you mean by "virus notifications"? Email from some mailing list? Updates to your anti-virus definitions? Gary Original Message > From: Dan Shadix <[EMAIL PROTECTED]> > Sent: Wednesday, March 28, 2007 6:55 PM > To: "declude.virus@declude.com" > Subject: [Declude.Virus] Virus notifications > > Since switching to SmarterMail, I haven't been receiving virus notifications. > Can someone give me a quick fix? > > Thanks in advance, > Dan > > > --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
re: [Declude.Virus] Virus notifications
What do you mean by "virus notifications"? Email from some mailing list? Updates to your anti-virus definitions? Gary Original Message > From: Dan Shadix <[EMAIL PROTECTED]> > Sent: Wednesday, March 28, 2007 6:55 PM > To: "declude.virus@declude.com" > Subject: [Declude.Virus] Virus notifications > > Since switching to SmarterMail, I haven't been receiving virus notifications. > Can someone give me a quick fix? > > Thanks in advance, > Dan > > > --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
[Declude.Virus] Virus notifications
Since switching to SmarterMail, I haven't been receiving virus notifications. Can someone give me a quick fix? Thanks in advance, Dan --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
[Declude.Virus] Virus notifications from local host
Title: Virus notifications from local host Hi, I have Declude set to send me an email notification when it has quarrantined an email containing a virus, using this variable: From: [EMAIL PROTECTED] I have since changed my OHN in IMAIL. The notification still has the old OHN It's coming to me as [EMAIL PROTECTED] I want it to say [EMAIL PROTECTED] Where else does this change need to be made? Thanks, Sharyn
Re: [Declude.Virus] Virus notifications
I send to everybody on NON-forging viruses (very few) I assume that most vulnerables and exploits are just spam and skip them with the forging viruses. If someone with Kak or a word macro virus tries to send a "real" file, then if everyone knows something can get figured out. Otherwise, it just falls into a hole and neither sender or receiver knows. I get the Full load, viruses, blocks, vulnerable, etc. to sort through if anything else needs to be done. (and see trends) Like on blocked files. Some are real users and some are New viruses. Greg Little --- [This E-mail scanned for viruses by Findlay Internet] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
Re: [Declude.Virus] Virus notifications
What is the current recommendation as far as virus notification setting
goes? We need to make sure we aren't doing more harm than good in this
arena. I know Matt had said he had some suggestions for us once when we
where corresponding privately on another matter.
We recommend running the latest beta of Declude Virus (1.79), which
automatically detects forging viruses, and prevents the
sender.eml/otherpostmaster.eml files from getting sent out (the only ones
that would be misdirected due to forging viruses).
For the recip.eml/postmaster.eml files, that's up to you. What some people
do is they leave them on, but after a virus has been prevalent for a day or
so, they turn them off for that virus ("SKIPIFVIRUSNAMEHAS NewVirus").
-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers
since 2000.
Declude Virus: Ultra reliable virus detection and the leader in mailserver
vulnerability detection.
Find out what you've been missing: Ask for a free 30-day evaluation.
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".The archives can be found
at http://www.mail-archive.com.
RE: [Declude.Virus] Virus notifications
Ditto! I only send to myself so I have a sense of what is going on from a quick overview Harry Vanderzand inTown Internet & Computer Services 11 Belmont Ave. W. Kitchener, ON N2M 1L2 519-741-1222 Did you know we offer: - Province wide dial-up and high speed internet access - Web accessible email with anti-spam\antivirus protection - Computer hardware sales and service - Experienced website developers > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Russ > Uhte (Lists) > Sent: Tuesday, June 15, 2004 3:05 PM > To: [EMAIL PROTECTED] > Subject: Re: [Declude.Virus] Virus notifications > > > At 01:23 PM 6/15/2004, David Fletcher wrote: > >Hi all, > > > >I know I should have stayed on top of this all along, but we need to > >make some adjustments now. > > > >What is the current recommendation as far as virus > notification setting > >goes? We need to make sure we aren't doing more harm than > good in this > >arena. I know Matt had said he had some suggestions for us > once when > >we where corresponding privately on another matter. > > I'm to the point now where I'm only sending virus > notifications to myself, > and only so I can see trends. It's pretty much useless to > send any other > type of virus notifications. Just my perspective!! > > -Russ > > --- > [This E-mail scanned for viruses by Declude Virus] > > --- > [This E-mail was scanned for viruses by Declude Virus > (http://www.declude.com)] > > --- > This E-mail came from the Declude.Virus mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.Virus".The archives can be found > at http://www.mail-archive.com. > > --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
Re: [Declude.Virus] Virus notifications
At 01:23 PM 6/15/2004, David Fletcher wrote: Hi all, I know I should have stayed on top of this all along, but we need to make some adjustments now. What is the current recommendation as far as virus notification setting goes? We need to make sure we aren't doing more harm than good in this arena. I know Matt had said he had some suggestions for us once when we where corresponding privately on another matter. I'm to the point now where I'm only sending virus notifications to myself, and only so I can see trends. It's pretty much useless to send any other type of virus notifications. Just my perspective!! -Russ --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
[Declude.Virus] Virus notifications
Hi all, I know I should have stayed on top of this all along, but we need to make some adjustments now. What is the current recommendation as far as virus notification setting goes? We need to make sure we aren't doing more harm than good in this arena. I know Matt had said he had some suggestions for us once when we where corresponding privately on another matter. Thanks, David --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] Virus notifications
Possible.. But strange that it is just now happening. I've had this same setup since I installed Declude with no configuration changes. Guess I shouldn't worry about it as long as the viruses are being caught. Sharyn -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Craig Gittens Sent: Tuesday, September 25, 2001 8:42 AM To: [EMAIL PROTECTED] Subject: RE: [Declude.Virus] Virus notifications Your onAccess scanner is deleting the file before declude can scan it and quarantine it? Craig. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Sharyn Schmidt Sent: Tuesday, September 25, 2001 7:54 AM To: [EMAIL PROTECTED] Subject: [Declude.Virus] Virus notifications Scott, Up until now, I have been getting the Declude email notifications that a virus was received on blah blah date, blah blah virus, etc. Now I am only getting the email notifications sporadically, however, I am getting messages from the McAfee alert manager (this has always been configured) saying that the imail spool file contained a virus and it was deleted. Here is what I got this morning from the Netshield Alert Manager... The file D:\Imail\spool\D022a260.vir\0.com is infected w/W32/SirCam@MM virus. The file was successfully deleted. I never received the email notification from Declude that a virus had been detected. I sent myself the Eicar test file from Declude's website just now as a test. This time, I got both messages, one from the Alert Manager, very similar to the above one, except stating the file had been quarrantined since it couldn't be cleaned, and I got the email notifications from Declude. Any clue as to why I'm not getting the email notifications each time I'm receiving a virus? As far as I know, nothing in my configuration has changed. Thanks, Sharyn Schmidt Network Specialist Florida Distillers Company (863) 956-1116 x139 We are the worldwide producer and marketer of the award winning Cruzan Single Barrel Rum, judged "Best in the World" at the annual San Francisco Wine and Spirits Championships, and the artisan tequilas of Porfidio 100% Agave Tequilas, judged "Best Tequila" four years running by the Wine Enthusiast magazine. For more information, please click (go to) http://www.cruzanrums.com";>http://http://www.cruzanrums";>www.cruzanrums.com This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . We are the worldwide producer and marketer of the award winning Cruzan Single Barrel Rum, judged "Best in the World" at the annual San Francisco Wine and Spirits Championships, and the artisan tequilas of Porfidio 100% Agave Tequilas, judged "Best Tequila" four years running by the Wine Enthusiast magazine. For more information, please click (go to) http://www.cruzanrums.com";>http://http://www.cruzanrums";>www.cruzanrums.com This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
RE: Re: [Declude.Virus] Virus notifications
>It's possible. I thought of that too, but I don't understand why this >would suddenly just start happening...and..I thought Declude scanned it >first? If the are getting messages from McAfee saying that it deleted the virus, the E-mail will almost certainly be delivered. If you use an on-access scanner (like the one you are using), the problem is that you are scanning the attachments twice. Here is what should normally happen (without the on-access scanner running): [1] Declude saves an attachment with a virus to the hard drive [2] Declude starts the command line scanner, which scans the file, and lets Declude know there was a virus [3] Declude blocks the E-mail from being delivered, and sends out the notifications But, if you have an on-access scanner running, here's what happens: [1] Declude saves an attachment with a virus to the hard drive [2] The on-access scanner immediately will detect the virus and delete the file [3] Declude starts the command line scanner. But, since the file is no longer there, the scanner reports no viruses were found [4] Declude then treats the E-mail as if it were virus-free, and lets it be delivered. -Scott This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
RE: Re: [Declude.Virus] Virus notifications
It's possible. I thought of that too, but I don't understand why this would suddenly just start happening...and..I thought Declude scanned it first? Obviously I need a Sequence 101 tutorial on what exactly does what first. I have only been using Declude for about 6 weeks now and am still learning. Not that I'm complaining! It's working great, but, in the instance of the SirCam virus where the same message from the same person gets sent out a zillion times, if I get the email notication, I can go to the Imail kill list and just block the entire domain if it isn't one that is important to business. Sharyn -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Chris Hunt Sent: Tuesday, September 25, 2001 8:38 AM To: [EMAIL PROTECTED] Subject: H:Re: [Declude.Virus] Virus notifications Could McAfee be deleting the virus even before declude gets to scan it? At 07:53 AM 9/25/01 -0400, you wrote: >Scott, > >Up until now, I have been getting the Declude email notifications that >a virus was received on blah blah date, blah blah virus, etc. This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . We are the worldwide producer and marketer of the award winning Cruzan Single Barrel Rum, judged "Best in the World" at the annual San Francisco Wine and Spirits Championships, and the artisan tequilas of Porfidio 100% Agave Tequilas, judged "Best Tequila" four years running by the Wine Enthusiast magazine. For more information, please click (go to) http://www.cruzanrums.com";>http://http://www.cruzanrums";>www.cruzanrums.com This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
RE: [Declude.Virus] Virus notifications
Your onAccess scanner is deleting the file before declude can scan it and quarantine it? Craig. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Sharyn Schmidt Sent: Tuesday, September 25, 2001 7:54 AM To: [EMAIL PROTECTED] Subject: [Declude.Virus] Virus notifications Scott, Up until now, I have been getting the Declude email notifications that a virus was received on blah blah date, blah blah virus, etc. Now I am only getting the email notifications sporadically, however, I am getting messages from the McAfee alert manager (this has always been configured) saying that the imail spool file contained a virus and it was deleted. Here is what I got this morning from the Netshield Alert Manager... The file D:\Imail\spool\D022a260.vir\0.com is infected w/W32/SirCam@MM virus. The file was successfully deleted. I never received the email notification from Declude that a virus had been detected. I sent myself the Eicar test file from Declude's website just now as a test. This time, I got both messages, one from the Alert Manager, very similar to the above one, except stating the file had been quarrantined since it couldn't be cleaned, and I got the email notifications from Declude. Any clue as to why I'm not getting the email notifications each time I'm receiving a virus? As far as I know, nothing in my configuration has changed. Thanks, Sharyn Schmidt Network Specialist Florida Distillers Company (863) 956-1116 x139 We are the worldwide producer and marketer of the award winning Cruzan Single Barrel Rum, judged "Best in the World" at the annual San Francisco Wine and Spirits Championships, and the artisan tequilas of Porfidio 100% Agave Tequilas, judged "Best Tequila" four years running by the Wine Enthusiast magazine. For more information, please click (go to) http://www.cruzanrums.com";>http://http://www.cruzanrums";>www.cruzanrums.com This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
H:Re: [Declude.Virus] Virus notifications
Could McAfee be deleting the virus even before declude gets to scan it? At 07:53 AM 9/25/01 -0400, you wrote: >Scott, > >Up until now, I have been getting the Declude email notifications that a >virus was received on blah blah date, blah blah virus, etc. This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
[Declude.Virus] Virus notifications
Scott, Up until now, I have been getting the Declude email notifications that a virus was received on blah blah date, blah blah virus, etc. Now I am only getting the email notifications sporadically, however, I am getting messages from the McAfee alert manager (this has always been configured) saying that the imail spool file contained a virus and it was deleted. Here is what I got this morning from the Netshield Alert Manager... The file D:\Imail\spool\D022a260.vir\0.com is infected w/W32/SirCam@MM virus. The file was successfully deleted. I never received the email notification from Declude that a virus had been detected. I sent myself the Eicar test file from Declude's website just now as a test. This time, I got both messages, one from the Alert Manager, very similar to the above one, except stating the file had been quarrantined since it couldn't be cleaned, and I got the email notifications from Declude. Any clue as to why I'm not getting the email notifications each time I'm receiving a virus? As far as I know, nothing in my configuration has changed. Thanks, Sharyn Schmidt Network Specialist Florida Distillers Company (863) 956-1116 x139 We are the worldwide producer and marketer of the award winning Cruzan Single Barrel Rum, judged "Best in the World" at the annual San Francisco Wine and Spirits Championships, and the artisan tequilas of Porfidio 100% Agave Tequilas, judged "Best Tequila" four years running by the Wine Enthusiast magazine. For more information, please click (go to) http://www.cruzanrums.com";>http://http://www.cruzanrums";>www.cruzanrums.com This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
