Re: [Declude.Virus] Is Declude Hijack run before Declude Virus - Swen virus

2003-09-27 Thread Bill Landry
- Original Message - From: "R. Scott Perry" <[EMAIL PROTECTED]> > That is intentional. The Declude diagnostics will create an eicar.com > file, and try to delete it. If it can't create or delete the file, it > displays a warning. This is designed for us to help discover when people >

Re: [Declude.Virus] Is Declude Hijack run before Declude Virus - Swen virus

2003-09-27 Thread R. Scott Perry
What I have noticed is that all of the 1.76i* releases have a problem with creating Eicar files in the directory that you run declude -diag in, except the IMail directory. For example, if I run three times at the root "C" prompt: C:\>m:\imail\declude -diag I will find the following in the root

Re: [Declude.Virus] Is Declude Hijack run before Declude Virus - Swen virus

2003-09-27 Thread Bill Landry
- Original Message - From: "Adolfo Justiniano" <[EMAIL PROTECTED]> > If you don't have a gateway and don't use ipbypass in Declude JunkMail > you probably wouldn't have the problem. I have two Redhat/Postfix gateways sitting in front of my IMail server and therefore do use IPBYPASS with

RE: [Declude.Virus] Is Declude Hijack run before Declude Virus - Swen virus

2003-09-27 Thread Adolfo Justiniano
>Strange, I have not had any problems with that interim release. What I have >noticed is that all of the 1.76i* releases have a problem with creating >Eicar files in the directory that you run declude -diag in, except the IMail >directory. For example, if I run three times at the root "C" prompt:

RE: [Declude.Virus] Is Declude Hijack run before Declude Virus - Swen virus

2003-09-27 Thread Adolfo Justiniano
>You are correct -- there is a new interim release v1.76i4 at the same URL >that fixes this. Thanks Scott, now it's working. Adolfo Justiniano Santa Cruz BBS e-mail: [EMAIL PROTECTED] http://www.scbbs.net --- [This E-mail was scanned for viruses by the Santa Cruz BBS anti-virus system] --- [T

Re: [Declude.Virus] Is Declude Hijack run before Declude Virus - Swen virus

2003-09-27 Thread Bill Landry
- Original Message - From: "R. Scott Perry" <[EMAIL PROTECTED]> > You are correct -- there is a new interim release v1.76i4 at the same URL > that fixes this. Strange, I have not had any problems with that interim release. What I have noticed is that all of the 1.76i* releases have a pr

Re: [Declude.Virus] Declude Virus v1.76 (beta) released

2003-09-27 Thread R. Scott Perry
Cool ! It might allow me to truely alert on local senders - can ONLYSENDIFIP handle multiple subnets? The ONLYSENDIFIP option works on partial matches, so you could have notifications only get sent out for a Class C range by using "ONLYSENDIFIP 192.0.2." (which would work for the entire range

RE: [Declude.Virus] Is Declude Hijack run before Declude Virus - Swen virus

2003-09-27 Thread R. Scott Perry
>We've made a change to the code for interim release v1.76i3 (at >http://www.declude.com/release/176i/declude.exe ) that should take care of >this issue. That interim version is seriously broken, none of the Declude JunkMail tests are executed, all messages have 0 as weight, no logs are generated.

Re: [Declude.Virus] Declude Virus v1.76 (beta) released

2003-09-27 Thread Mike Nice
Cool ! It might allow me to truely alert on local senders - can ONLYSENDIFIP handle multiple subnets? - Original Message - > o Adds ONLYSENDIFRECIP and ONLYSENDIFIP options for .eml files > that should only be sent to specific recipients or IPs. --- [This E-mail was scanned fo

RE: [Declude.Virus] Is Declude Hijack run before Declude Virus - Swen virus

2003-09-27 Thread John Tolmachoff \(Lists\)
First thing to do is go to a command prompt and change to the Imail directory and type in without the quotes: "declude -diag" and see if there are any errors noted. Also check to see if there are any declude.gp(number) files in the C:\ drive. John Tolmachoff MCSE CSSA Engineer/Consultant eServ

Re: [Declude.Virus] Is Declude Hijack run before Declude Virus - Swen virus

2003-09-27 Thread Bill Landry
- Original Message - From: "Adolfo Justiniano" <[EMAIL PROTECTED]> > Scott, > > That interim version is seriously broken, none of the Declude JunkMail > tests are executed, all messages have 0 as weight, no logs are > generated... I have to go back to 1.76i2. It's working fine for me (1