[Declude.Virus] Interim .62 triggered Blank Folding on this one and other emails

2007-10-05 Thread Andy Schmidt
Other emails from this same Thunderbird 2.0.0.6 user, using the same smtp relays, were also blocked. File: "[No attachment]" Result: Found[Outlook 'Blank Folding' Vulnerability] -Original Message Headers- Received: from smtp.webhost.hm-software.com [63.107.174.32] by hm-software.co

RE: [Declude.Virus] 4.3.62 countless false positives for vulnerabilties

2007-10-05 Thread Andy Schmidt
I reverted to .57 and had someone resent an email with Attachment from Lotus Notes and this time it went through. So - the answer is "yes", the problem goes away with .57. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Barker Sent: Friday, October 05, 2007 11:27 AM To:

RE: [Declude.Virus] 4.3.62 countless false positives for vulnerabilties

2007-10-05 Thread David Barker
Thanks for the feedback we are looking at it as #1 priority at the moment. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Andy Schmidt Sent: Friday, October 05, 2007 2:09 PM To: declude.virus@declude.com Subject: RE: [Declude.Virus] 4.3.62 countless false positives for vulnerabi

RE: [Declude.Virus] 4.3.62 countless false positives for vulnerabilties

2007-10-05 Thread Andy Schmidt
Dave, The Blank Folding Vulnerability is ALSO causing false positives (but not as many as the Postamble one). I'll send you ANOTHER email with Blank Folding false positives in about 5 minutes. I have to back this release out - something majorly wrong with it. Best Regards, Andy

RE: [Declude.Virus] 4.3.62 countless false positives for vulnerabilties

2007-10-05 Thread Andy Schmidt
Hi, Okay, just sent it a moment ago. It effects ebay notifications, UPS notifications, Dell's newsletters - lots of things that usually go through. But also tons of individual person-to-person emails - I have about 500 of them before I turned it off. Best Regards, Andy From: [EMAIL

RE: [Declude.Virus] 4.3.62 countless false positives for vulnerabilties

2007-10-05 Thread David Barker
Send them directly to me. David From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Andy Schmidt Sent: Friday, October 05, 2007 12:15 PM To: declude.virus@declude.com Subject: RE: [Declude.Virus] 4.3.62 countless false positives for vulnerabilties I have not reverted to .57,

RE: [Declude.Virus] 4.3.62 countless false positives for vulnerabilties

2007-10-05 Thread Andy Schmidt
I have not reverted to .57, I have disabled this vulnerability in the Virus.cfg for now to see what other issues I might uncover. (There was a false positive reported last night for a different vulnerability for mail send by Netscapes mail applet, but I haven't firmed that one up yet). If you l

Re: [Declude.Virus] Question regarding Whitelist

2007-10-05 Thread Darrell (supp...@invariantsystems.com)
No, Whitelisting only applies to Junkmail. Mail that is whitelisted will still be virus scanned. Darrell -- Check out http://www.invariantsystems.com for utilities for Declude, Imail, mxGuard, and ORF. IMail/Declude Overflow Queue Monitoring, SURBL/URI integr

RE: [Declude.Virus] 4.3.62 countless false positives for vulnerabilties

2007-10-05 Thread Kevin Bilbee
Our previous version is 4.3.46 and it work fine except for the "Outlook space Gap Issue". I have not loaded any of the other interims to be able to test them. Kevin Bilbee From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Barker Sent: Friday, October 05, 2007 7:4

RE: [Declude.Virus] 4.3.62 countless false positives for vulnerabilties

2007-10-05 Thread David Barker
Ok so if you revert to .57 the issue goes away correct. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Andy Schmidt Sent: Friday, October 05, 2007 11:18 AM To: declude.virus@declude.com Subject: RE: [Declude.Virus] 4.3.62 countless false positives for vulnerabilties I did no

RE: [Declude.Virus] 4.3.62 countless false positives for vulnerabilties

2007-10-05 Thread Andy Schmidt
I did not have this problem with .57. So we can rule out .46. Sorry, jumped right from .57 to .62 - so can't say if it was introduced with .59 already. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Barker Sent: Friday, October 05, 2007 10:49 AM To: declude.virus@decl

RE: [Declude.Virus] Question regarding Whitelist

2007-10-05 Thread David Barker
No whitelisted is only for JM. David -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jon Lucas Sent: Friday, October 05, 2007 10:46 AM To: declude.virus@declude.com Subject: [Declude.Virus] Question regarding Whitelist If a domain is whitelisted, does De

RE: [Declude.Virus] 4.3.62 countless false positives for vulnerabilties

2007-10-05 Thread David Barker
Ok, we are working on the issue, can you replicate it with an earlier version of Declude like .46 or .59 ? From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Andy Schmidt Sent: Friday, October 05, 2007 10:45 AM To: declude.virus@declude.com Subject: RE: [Declude.Virus] 4.3.62 countl

RE: [Declude.Virus] 4.3.62 countless false positives for vulnerabilties

2007-10-05 Thread Andy Schmidt
Hi Dave, Well, I dropped in 4.3.62 in the afternoon and throughout the afternoon was getting reports from people using VARIOUS email systems (not limited to Yahoo's mail service), that just happened to be the one that I had at my finger tips. I can also say that it happened to people sendin

[Declude.Virus] Question regarding Whitelist

2007-10-05 Thread Jon Lucas
If a domain is whitelisted, does Declude bypass the virus filtering and allow the email to pass through? Jon Lucas Poly-Cast, Inc. --- [This E-mail scanned for viruses by Declude Virus] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PRO

RE: [Declude.Virus] 4.3.62 countless false positives for vulnerabilties

2007-10-05 Thread David Barker
We are looking into this code, are you sure it is 4.3.62 and not a change with YahooMailWebService? From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Andy Schmidt Sent: Thursday, October 04, 2007 9:53 PM To: declude.virus@declude.com Subject: [Declude.Virus] 4.3.62 countless false

RE: [Declude.Virus] 4.3.62 countless false positives for vulnerabilties

2007-10-05 Thread Andy Schmidt
Hi Kevin, thanks. To save me and my customers frustration - is it limited to that one vulnerability - or are other's involved that I should disable proactively (or reverse to the previous build)? Best Regards, Andy From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kevin Bi

RE: [Declude.Virus] 4.3.62 countless false positives for vulnerabilties

2007-10-05 Thread Kevin Bilbee
I reported this to declude. They are working on it. Kevin Bilbee From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Andy Schmidt Sent: Thursday, October 04, 2007 6:53 PM To: declude.virus@declude.com Subject: [Declude.Virus] 4.3.62 countless false positives for vulnerabilt

[Declude.Virus] Out of the Office

2007-10-05 Thread lpagillo
I will be out of the office on vacation from October 1st through October 5th, returning on Monday, October 8th. If you require immediate assistance, please send an email to [EMAIL PROTECTED] or call David Barker at 1-866-332-5833 Ext.7007. Thank you. --- This E-mail came from the Declude.Vir