: [Declude.JunkMail] Multi Server Configs
Thank you Matt. If correct, you've brought me more clarity and direction
than I've
had since this mess began. I've been so focused on fighting spam, I
havn't yet
installed Scott's AV system (after more than a year), relying instead on a
basic
Norton config
Dan,
It appears that E-mail is first scanned by the virus scanner (F-Prot or
whatever), and then if it passes, the excluded extensions are tested.
So as soon as your virus scanner became Sobig.F aware, the excluded
extensions test doesn't get done because it is blocked by the scanner.
Maybe
PROTECTED]
Subject: Re: [Declude.JunkMail]
Multi Server Configs
Dan,
It appears that E-mail is first scanned by the virus scanner (F-Prot or
whatever), and then if it passes, the excluded extensions are tested. So
as soon as your virus scanner became Sobig.F aware, the excluded extensions
test
To: [EMAIL PROTECTED]
Subject: Re: [Declude.JunkMail] Multi Server Configs
Dan,
It appears that E-mail is first scanned by the virus scanner
(F-Prot or whatever), and then if it passes, the excluded
extensions are tested. So as soon as your virus scanner became
Sobig.F aware, the excluded
Thank you Matt. If correct, you've brought me more clarity and direction than I've
had since this mess began. I've been so focused on fighting spam, I havn't yet
installed Scott's AV system (after more than a year), relying instead on a basic
Norton config to handle things.
Scott,
Can you
/Consultant
eServices For You
www.eservicesforyou.com
-Original Message-
From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
[EMAIL PROTECTED] On Behalf Of Dan Patnode
Sent: Monday, August 25, 2003 12:10 AM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.JunkMail] Multi Server Configs
Thank you
Scott,I know this is the wrong discussion group, but since we're on
the topic, would it make more sense to test for banned extensions before it goes
to the virus scanner in order to save processing power?
Scott,
please don`t do this. I forward messages with banned extension sometimes, and i
One of the beauties of using Declude plus F-Prot is that most desktops
use either Norton or McAfee, and the release of the various definitions
updates aren't instantaneous. I've seen F-Prot catch stuff that Norton
isn't yet detecting and visa-versa.
I have Norton also running on my server,
I'm not saying that you are wrong to do what you do, just that I and
many others consider the banned extensions a first line of defense for brand new
viruses, and it is definitely necessary for good virus protection and causes no
problems unless you are blocking more common extensions (like
Why do you update definitions so seldom? FProt updated the same day that
SoBig.F started being circulated, from the experience of those on thsi list.
-Original Message-
From: Matthew Bramble
I would have been letting Sobig.F through Declude plus F-Prot from Monday
all the way through
AM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.JunkMail] Multi Server Configs
I update 4 times a day with scheduling, but for some reason, this time
it took a while for my server to get the update. I checked my logs and
the definitions changed size at the time when it started detecting
, August 25, 2003 7:54 AM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.JunkMail] Multi Server Configs
I update 4 times a day with scheduling, but for some reason, this time
it took a while for my server to get the update. I checked my logs and
the definitions changed size at the time when it started
Thanks for all the great feedback. I'm still drowning in 50,000+ SoBig message/day
but at least I now have them balanced over both 5gig servers instead of just one.
What kills me is that the vast majority are headed for a single customers info@
address.
Matt, by this:
This does tie back
Dan,
Declude does not have that kind of power as it is the IMAIL SMTP Daemon
which accepts the mail and places it into the spool.
After it is in the spool declude queue moves it to the overflow for faster
processing if there are more messages in the spool than imail can run
smtp-delivery
]
To: [EMAIL PROTECTED]
Sent: Thursday, August 21, 2003 6:15 AM
Subject: RE: [Declude.JunkMail] Multi Server Configs
Dan,
Declude does not have that kind of power as it is the IMAIL SMTP Daemon
which accepts the mail and places it into the spool.
After it is in the spool declude queue moves
|Netsmith Inc [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Thursday, August 21, 2003 6:15 AM
Subject: RE: [Declude.JunkMail] Multi Server Configs
Dan,
Declude does not have that kind of power as it is the IMAIL SMTP Daemon
which accepts the mail and places it into the spool.
After
the toughest nut.
-Original Message-
From: Webmaster Oilfield Directory [mailto:[EMAIL PROTECTED]]
Sent: Thursday, August 21, 2003 10:10 AM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.JunkMail] Multi Server Configs
LOL! that's peanuts.. try 70,000 ...yes 70,000 per hour and then tell
me about
We have a little less volume than you do, but it's amazing how
concentrated the messages can be. My personal account which has many
domains pointed at it has not received a single copy of the virus, but one
account on our server has been hit over 500 times in the last 48
hours. We run
18 matches
Mail list logo
