LogSat Software

Message Topic Search Topic Options Post Reply Create New Topic Printable Version Translate Topic

   Am I just too damn tired or is there no way to NOT quarantine viruses?  If so, can that feature be added?  We are getting killed by viruses and the SQL inserts are really loading the server up and causing very high inbound connections because there is not much CPU left to deal with normal mail.   Having the "Blocked Attachments" come prior to the virus scan would allow me to null known attachments but if I recall, there was a technical problem with that.

Author	Message Topic Search Topic Options Post Reply Create New Topic Printable Version Translate Topic
Desperado Members Profile Send Private Message Find Members Posts Add to Buddy List Guest Group	Post Options Post Reply Quote Desperado Thanks(0) Quote Reply Topic: Change Request Posted: 29 November 2005 at 1:49pm
	Am I just too damn tired or is there no way to NOT quarantine viruses? If so, can that feature be added? We are getting killed by viruses and the SQL inserts are really loading the server up and causing very high inbound connections because there is not much CPU left to deal with normal mail. Having the "Blocked Attachments" come prior to the virus scan would allow me to null known attachments but if I recall, there was a technical problem with that.

vrspock Members Profile Send Private Message Find Members Posts Add to Buddy List Guest Group	Post Options Post Reply Quote vrspock Thanks(0) Quote Reply Posted: 30 November 2005 at 12:02am
	There should also be a way to nullify NDR's for viruses. The latest Sober.X aka Sober.AA virus appears to be deliberately causing a DoS styled flood of NDR's to fbi.gov and cia.gov from every mail server it is flooding with its garbage. I just had to mass deleted about 70 items in our queue folder for Spamfilter that were all attempting to be sent to cia.gov or fbi.gov and are getting their connections dropped...I'm assuming this is either because those two domains are under some extremely heavy loads right now becuase of the virus or their mail administrators have put us on a black list for the flood of NDR's we have been sending them.

Marco Sola Members Profile Send Private Message Find Members Posts Add to Buddy List Guest Group	Post Options Post Reply Quote Marco Sola Thanks(0) Quote Reply Posted: 30 November 2005 at 2:58am
	Yes, indeed, the triggering order have to be fixed. I still can't get why I have to quarantine a .pif infected attachment when I have set this to :null

LogSat Members Profile Send Private Message Find Members Posts Add to Buddy List Admin Group Joined: 25 January 2005 Location: United States Status: Offline Points: 4104	Post Options Post Reply Quote LogSat Report Post Thanks(0) Quote Reply Posted: 30 November 2005 at 1:27pm
	You are all right, that feature is missing, but should indeed be there. We'll try to create an updated version with the do not quarantine option as soon as possible.
	Roberto Franceschetti LogSat Software Spam Filter ISP

Marco Sola Members Profile Send Private Message Find Members Posts Add to Buddy List Guest Group	Post Options Post Reply Quote Marco Sola Thanks(0) Quote Reply Posted: 01 December 2005 at 3:14am
	Great! And while you're at it ;-) please consider adding an option for not quarantine messages that exceed max RCPT: Sober is really flooding

LogSat Members Profile Send Private Message Find Members Posts Add to Buddy List Admin Group Joined: 25 January 2005 Location: United States Status: Offline Points: 4104	Post Options Post Reply Quote LogSat Report Post Thanks(0) Quote Reply Posted: 01 December 2005 at 6:46pm
	The "emergency" version of SpamFilter with the option to not quarantine or send to NULL virus-infected emails is now available in the registered user area of our website. The build is 2.6.3.495. Please note that this build was created in reponse to urgent user requests, and has not gone through all the testing we'd normally perform before a pre-release. Please report any problems to support@logsat.com so we can take care of them as soon as possible.
	Roberto Franceschetti LogSat Software Spam Filter ISP

Desperado Members Profile Send Private Message Find Members Posts Add to Buddy List Senior Member Joined: 27 January 2005 Location: United States Status: Offline Points: 1143	Post Options Post Reply Quote Desperado Report Post Thanks(0) Quote Reply Posted: 01 December 2005 at 7:52pm
	Roberto, THANK YOU!. So far, all looks good! Can you expand on the "no" VS "Send To Null" . Thanks again.
	The Desperado Dan Seligmann. Work: http://www.mags.net Personal: http://www.desperado.com

Desperado Members Profile Send Private Message Find Members Posts Add to Buddy List Senior Member Joined: 27 January 2005 Location: United States Status: Offline Points: 1143	Post Options Post Reply Quote Desperado Report Post Thanks(0) Quote Reply Posted: 02 December 2005 at 5:34pm
	Roberto, Again, Thanks and no problems yet. QUESTION: Will the value be read in from the ini if I change the value from a WEB GUI while SpamFilter is running? NEVER MIND ... Answered my own question and it seems to be YES. das Edited by Desperado
	The Desperado Dan Seligmann. Work: http://www.mags.net Personal: http://www.desperado.com

LogSat Software

Site Navigation[Skip]

Spam Filter ISP Support Forum

Change Request