Re: [Declude.Virus] Log File Errors
> >06/04/2003 14:51:29 Q3ef6000501666762 ERROR: Virus scanner didn't finish > >after 60 seconds; terminating. what happens to unfinished virus scanner process? is it terminated completely and correctly? Yes, it is terminated completely and correctly, and Declude will continue processing the E-mail as if the virus scanner finished and reported that the E-mail was virus-free. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you have been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
Re: [Declude.Virus] Log File Errors
Hello, On Thursday 05 June 2003 01:31, you wrote: > > Today we had a 'horrible' thing happened with our scanner (have two > > in place F-Prot and InoculateIT), not sure which one had issues: > > > >06/04/2003 14:51:29 Q3ef6000501666762 ERROR: Virus scanner didn't finish > >after 60 seconds; terminating. what happens to unfinished virus scanner process? is it terminated completely and correctly? Albertas --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] Log File Errors
Does the new beta 1.70 with interims address the issues of the No filename in disp Content-Disposition: attachment? No -- we are not aware of any issue here (except the obvious; that some E-mails have what appear to be broken Content-Disposition: headers). Should I be running it (i.e. more stable) than the 1.69beta? I would recommend running 1.70, as it is the latest beta version. Is the 60sec delay on timeout for scanning pretty normal, or should I be setting that to less. The timeout value is fine (it shouldn't take a scanner more than a few seconds to scan an E-mail, even under heavy load). My only concern is large attachment scanning. Virus scanners typically can scan multimegabyte files in less than a second, from what we have seen, so this shouldn't be an issue. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you have been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] Log File Errors
Does the new beta 1.70 with interims address the issues of the No filename in disp Content-Disposition: attachment? Should I be running it (i.e. more stable) than the 1.69beta? Is the 60sec delay on timeout for scanning pretty normal, or should I be setting that to less. My only concern is large attachment scanning. Thanks again for being a sounding board. Keith Johnson -Original Message- From: R. Scott Perry [mailto:[EMAIL PROTECTED] Sent: Wed 6/4/2003 6:31 PM To: [EMAIL PROTECTED] Cc: Subject: Re: [Declude.Virus] Log File Errors > Today we had a 'horrible' thing happened with our scanner (have two > in place F-Prot and InoculateIT), not sure which one had issues: > >06/04/2003 14:51:29 Q3ef6000501666762 ERROR: Virus scanner didn't finish >after 60 seconds; terminating. This is the problem -- one of the virus scanners was getting "stuck", and not finishing its scanning (which also indirectly caused further problems, such as the sharing violation). >his took our server to a crawl as it couldn't scan emails, there was 30 >min. of living he.. there. When I checked the spool folder we were in >overflow due to the backup of the virus scanning. We are also still >continuing to receive a ton of these in my logs: > >06/04/2003 08:45:39 Qe9ec092201523842 No filename in disp >Content-Disposition: attachment. Searching through viruses we've received, we found a W32/[EMAIL PROTECTED] that could cause this unusual warning. It should not normally appear for legitimate E-mails, however. >Also, if I have issues with the scanners, what should be the sequence to >aid in the problem above. The key here would be to find out which of the two scanners wasn't finishing, and fix it. However, that may be difficult to do. The next release of Declude Virus will log which scanner didn't finish. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you have been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com. <>
Re: [Declude.Virus] Log File Errors
Today we had a 'horrible' thing happened with our scanner (have two in place F-Prot and InoculateIT), not sure which one had issues: 06/04/2003 14:51:29 Q3ef6000501666762 ERROR: Virus scanner didn't finish after 60 seconds; terminating. This is the problem -- one of the virus scanners was getting "stuck", and not finishing its scanning (which also indirectly caused further problems, such as the sharing violation). his took our server to a crawl as it couldn't scan emails, there was 30 min. of living he.. there. When I checked the spool folder we were in overflow due to the backup of the virus scanning. We are also still continuing to receive a ton of these in my logs: 06/04/2003 08:45:39 Qe9ec092201523842 No filename in disp Content-Disposition: attachment. Searching through viruses we've received, we found a W32/[EMAIL PROTECTED] that could cause this unusual warning. It should not normally appear for legitimate E-mails, however. Also, if I have issues with the scanners, what should be the sequence to aid in the problem above. The key here would be to find out which of the two scanners wasn't finishing, and fix it. However, that may be difficult to do. The next release of Declude Virus will log which scanner didn't finish. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you have been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
