[Declude.Virus] New weblog analyzer available

2003-01-30 Thread Duane Cox
I have compiled the first public beta of "MIAMI", which is a Declude Virus log analyzer. (see previous posts) At this point Declude JunkMail is not included, but when it is, I feel it will be the coolest thing yet. I was planning on programming the web side of things in PHP, but since everything

Re: [Declude.Virus] Yaha, maybe broken/corrupt, got through

2003-01-30 Thread R. Scott Perry
Do you still have the E-mail in the .mbx file (which we can use to test here)? I'm trying to get it from my client, at the moment, no Actually, it is the .mbx file on the IMail server that I would need -- that's the one that has all the raw E-mail headers in it (once it reaches the client,

Re: [Declude.Virus] Yaha, maybe broken/corrupt, got through

2003-01-30 Thread Jeff Lesperance
Do you still have the E-mail in the .mbx file (which we can use to test here)? I'm trying to get it from my client, at the moment, no Is the "name-shake.scr" a typo (it should be "name=shake.scr")? -Scott Typo, sorry - I'm transcribing from a fax the

Re: [Declude.Virus] Yaha, maybe broken/corrupt, got through

2003-01-30 Thread R. Scott Perry
Had a curious instance of what looks like Yaha come through my mail server today, got through Declude/F-Prot including my BANEXT SCR setting (file came through as shake.scr) all the way to an email box where my client found it. Header in email message had: X-Mailer: Microsoft Outlook Express

RE: [Declude.Virus] Yaha, maybe broken/corrupt, got through

2003-01-30 Thread Rick Leske
Jeff, I believe you need to update your declude virus. I have a link for the download but not sure if I can release it. Send an email to [EMAIL PROTECTED] and I'm sure -Scott will be able to help ya. ~Rick > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED]]On Be

[Declude.Virus] Yaha, maybe broken/corrupt, got through

2003-01-30 Thread Jeff Lesperance
Hi All, Had a curious instance of what looks like Yaha come through my mail server today, got through Declude/F-Prot including my BANEXT SCR setting (file came through as shake.scr) all the way to an email box where my client found it. Header in email message had: X-Mailer: Microsoft Outlook E

Re: [Declude.Virus] JunkMail Question

2003-01-30 Thread R. Scott Perry
I would like to keep virus but turn off junkmail for a specific domain... I have the following line at the bottom of my global config... WHITELIST TO @domain.com In this case, you need to use "WHITELIST TODOMAIN @example.com". is there are virus_domains.txt for junkmail... like junkmail_dom

[Declude.Virus] JunkMail Question

2003-01-30 Thread Dayton Digital Networks
I want to whitelist an entire domain on my mail server to allow all messages to come to it... i am running declude hijack, junkmail, and virus I would like to keep virus but turn off junkmail for a specific domain... I have the following line at the bottom of my global config... WHITELIST TO @d

Re: [Declude.Virus] log analyzer error

2003-01-30 Thread paul
*ahem* ok, forget I asked... I caught my mistake... sometimes it helps to be scanning the VIRUS logs. sheesh long day Paul > I downloaded the Virus Log Analyzer tool, and it > worked GREAT the first 2 times it ran, now I get the following error: > > Error Returned From Produce_Outpu

[Declude.Virus] log analyzer error

2003-01-30 Thread paul
hey gang, here's a problem: I downloaded the Virus Log Analyzer tool, and it worked GREAT the first 2 times it ran, now I get the following error: Error Returned From Produce_Outputfile() Any help? I tried to reinstall the newest version, but get the same results. Paul --- [This E-ma

RE: [Declude.Virus] config file

2003-01-30 Thread Rick Leske
kewl tnx ~Ric > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED]]On Behalf Of R. Scott Perry > Sent: Thursday, January 30, 2003 12:22 PM - FamHost > To: [EMAIL PROTECTED] > Subject: Re: [Declude.Virus] config file > > > > >What are the meanings of the settings

Re: [Declude.Virus] config file

2003-01-30 Thread R. Scott Perry
What are the meanings of the settings LOW/MED/HIGH for the LOGLEVEL function within virus. cfg? "LOGLEVEL LOW" is the default, and will report standard information. "LOGLEVEL MID" will report extra information (such as To:/From:/Subject:) "LOGLEVEL HIGH" will record the most information possi

[Declude.Virus] config file

2003-01-30 Thread Rick Leske
What are the meanings of the settings LOW/MED/HIGH for the LOGLEVEL function within virus. cfg? tia, ~Rick ___ Virus Scanned and Filtered by http://www.FamHost.com E-Mail System. --- [This E-mail was scanned for viruses by Declude

RE: [Declude.Virus] Error5 at 4154a6 v1.66

2003-01-30 Thread Jim Rooth
After doing a more thorough follow up, I find what you were describing. It relates to the declude log file which says it had a high weight and was discarded. Where I was going astray was in listening to the sender telling me there was only a "test" in the message. The headers I saw when the send

RE: [Declude.Virus] Error5 at 4154a6 v1.66

2003-01-30 Thread R. Scott Perry
Imail Log: 20030129 092903 127.0.0.1 SMTPD (06480174) [63.168.94.204] EHLO srvhouexc04.natoil.com 20030129 092903 127.0.0.1 SMTPD (06480174) [63.168.94.204] MAIL FROM:<[EMAIL PROTECTED]> 20030129 092903 127.0.0.1 SMTPD (06480174) [63.168.94.204] RCPT TO:<[EMAIL PROTECTED]> NOTIF

RE: [Declude.Virus] Error5 at 4154a6 v1.66

2003-01-30 Thread Jim Rooth
Imail Log: 20030129 092903 127.0.0.1 SMTPD (06480174) [63.168.94.204] EHLO srvhouexc04.natoil.com 20030129 092903 127.0.0.1 SMTPD (06480174) [63.168.94.204] MAIL FROM:<[EMAIL PROTECTED]> 20030129 092903 127.0.0.1 SMTPD (06480174) [63.168.94.204] RCPT TO:<[EMAIL PROTECTED]> NOTIFY=

RE: [Declude.Virus] Error5 at 4154a6 v1.66

2003-01-30 Thread R. Scott Perry
I had never noticed it before :>)) I am however losing emails and that is the only reason given for the particular email. I have the sender send one to my personal (off server) account and it comes through with no problem. What do the log files show for the E-mail that is lost? Note that the

RE: [Declude.Virus] Error5 at 4154a6 v1.66

2003-01-30 Thread Jim Rooth
I had never noticed it before :>)) I am however losing emails and that is the only reason given for the particular email. I have the sender send one to my personal (off server) account and it comes through with no problem. Strange... Jim Rooth Klotron, Inc. 214.244.0979 [EMAIL PROTECTED] -O

RE: [Declude.Virus] Error5 at 4154a6 v1.66

2003-01-30 Thread R. Scott Perry
Since upgrading to 1.66 I have been getting NOTICE=FAILURE,DELAY errors like crazy. I just upgraded to the 166i version. Will this take care of this problem as well? That's actually not a problem -- that's just standard IMail (SMTP, actually) behavior. A mailserver will send the "NOTICE=FAI

RE: [Declude.Virus] Error5 at 4154a6 v1.66

2003-01-30 Thread Jim Rooth
Since upgrading to 1.66 I have been getting NOTICE=FAILURE,DELAY errors like crazy. I just upgraded to the 166i version. Will this take care of this problem as well? Jim Rooth Klotron, Inc. 214.244.0979 [EMAIL PROTECTED] -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTE

Re: [Declude.Virus] Error5 at 4154a6 v1.66

2003-01-30 Thread R. Scott Perry
Thanks. It took care of the problem. (Do you need my .gp_ files anyways, or not?) Not in this case, as there was sufficient information with the "Error 5 at 4154a6 v1.66". -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude