Declude - Your Email Security is our Business

Toll Free 1.866.332.5833

Release Notes



	Manuals

	EVA Manual

	Hijack Manual

	Interceptor Alligate Manual

	JunkMail Manual

	Release Notes

	Self Support

	Knowledge Base

	Install & Upgrade Guide

	Feedback Loops

	Tips & Tricks

	AHBL Setup

	Filter Configuration

Declude Security Suite 4.10.53 [7 July2010]

Piece

Type

Change

FIX

Update AVG SDK to 1.7.9836 to fix the problem with using the SDK on a machine with AVG 9.0.837

DEC

ADD

Allow the user to specify HOMEREGION specifically designed for users outside of North America and applies to the ROUTING test. Add one of the following depending on your region to the declude.cfg (North America is the default)

HOMEREGION   Afrinic
HOMEREGION   Apnic
HOMEREGION   Anic
HOMEREGION   Lacnic
HOMEREGION   Ripe_ncc

More information on your specific country can be found here

FIX

Changed ZEROHOUR test to work the same as other tests. Remove the old line ZEROHOUR 12 Located in the Global.cfg add the new configuration

COMMTOUCH

ZEROHOUR

SNF

ADD

Added "nonzero" option for SNF test. Located in the Global.cfg

SNIFFER

SNF

NONZERO

SNF

FIX

Changed from message id = "TestMessage" to display the spool name

Declude Security Suite 4.10.48 [27 April 2010]

Piece	Type	Change
JM	FIX	Fix for SNF Authentication to turn off without having to restart Decludeproc
JM	FIX	Fix closing files when PCRE dll encounters an error
AV	FIX	Fix memory leak in AVG SDK Release Instance
AV	ADD	Updated AVG SDK to 1.7.9783 added avgcorex.dll and avgcert.dll
DEC	FIX	Optimize code for moving files to the \spool directory for Smartermail & IMail
DEC	FIX	Fixed variable in the MoveToError function which were declared globally

Declude Security Suite 4.10.42 [28 December 2009]

Piece

Type

Change

ADD

Add Imail support for SQL Database. Declude can check the SQL DB for Autowhitelist.

ADD

IPNOSCAN for IMail

ADD

Add a new directive POSTINIFIX uses either ON or OFF in the declude.cfg file. Postini is a large managed email service which amend the header structure. The Postini fix helps Declude correctly identify Postini headers. To configure on use POSTINIFIX ON

ADD

ADD

IPBYPASS can be configured with CIDR

ADD

New Header directive XWHITELIST ON in the global.cfg will give the reason for why the email was WHITELISTED in the header of the email.

ADD

Integrated Message Sniffer with Declude. Will use Declude rulebase. (If you are a current Message Sniffer user this does not apply to you unless you want to switch and use the Declude rulebase) To configure the SNF files need to be edit by the user, where the [PATH] needs to be the actual path on your server.

getRulebase.cmd

SET SNIFFER_PATH=[PATH]\declude\scanners\SNF\

Snf_engine.xml file

<update-script on-off='on' call='[PATH]\declude\scanners\SNF\getRulebase.cmd' guard-time='180'/>

Global.cfg

SNFIPCAUTION	SNFIP	x	4	5	0
SNFIPBLACK	SNFIP	x	5	10	0
SNFIPTRUNCATE	SNFIP	x	6	10	0

IPREPUTATION	SNFIPREP	x	0	10	-5

SNIFFER-TRAVEL	SNF	x	47	10	0
SNIFFER-INSURANCE	SNF	x	48	10	0
SNIFFER-AV-PUSH	SNF	x	49	10	0
SNIFFER-WAREZ	SNF	x	50	10	0
SNIFFER-SPAMWARE	SNF	x	51	10	0
SNIFFER-SNAKEOIL	SNF	x	52	12	0
SNIFFER-SCAMS	SNF	x	53	10	0
SNIFFER-PORN	SNF	x	54	10	0
SNIFFER-MALWARE	SNF	x	55	10	0
SNIFFER-ADVERTISING	SNF	x	56	10	0
SNIFFER-SCHEME	SNF	x	57	10	0
SNIFFER-CREDIT	SNF	x	58	10	0
SNIFFER-GAMBLING	SNF	x	59	10	0
SNIFFER-GENERAL	SNF	x	60	10	0
SNIFFER-SPAM	SNF	x	61	10	0
SNIFFER-OBFUSCATION	SNF	x	62	10	0
SNIFFER-IP-RULES	SNF	x	63	10	0

SNFTRUNCATE	SNF	x	20	10	0

EVA

FIX

Fix for Virus test not catching the eicar test due to e-mail formatting

ADD

Added a function to send a notify e-mail when hijack is triggered and e-mails are being held in the Hold2 folder To turn the Hijack e-mail notify on add the following directive to the hijack.cfg.

HIJNOTIFY ON

Add the included HijackNotify.eml into the \Declude directory. The email can be modified.

DEC

ADD

Added variable %AUTH% to show the authenticated sender of the email

Declude Security Suite 4.6.35 [1 June 2009]

Piece	Type	Change
EVA	FIX	Update AVG Database structure and Key license key Exp=2010-12-31
JM	FIX	Console.txt not printing properly due to variables not being initialized
JM	FIX	Fixed Declude crash due to formatting string in the Log function
JM	FIX	Removed old log message "Pro version required for outgoing mail." Declude no longer has pro version
JM	FIX	SmarterMail: Fixed ROUTETO action when the recipient is an alias
JM	FIX	Removed DEBUG log information doprewhitelist from LOGEVEL LOW

Declude Security Suite 4.5.29 [23 February 2009]

Piece	Type	Change
HI	FIX	Hijack logging error fixed
JM	FIX	Fix memory leak in SPF test
JM	FIX	Fixed IPBYPASS > 0 triggered inconsistencies with the IPFILE test
JM	FIX	In "fullmsg" the header part of the message was being stored and printed twice.
JM	FIX	Changed critical section to when accessing the Address book for autowhitelisting to resolve a thread hanging issue with IMail.
JM	FIX	Added critical section before opening the Imail MS Access DataBase to prevent crashes
JM	FIX	Fixed a crash issue, due to decoding of the subject line.
JM	FIX	If ZEROHOUR weight value cannot be converted to an integer it will be ignored. This is a fix for a bug reported when ZEROHOUR test action was set, ZEROHOUR was scoring a value of zero.
JM	FIX	Fixed CATCHALLMAIL to be triggered on whitelisted e-mail
JM	ADD	Change Request Skip AUTOWHITELIST when the sender matches the recipient.
JM	ADD	Increased number of Tests run in global.cfg
JM	ADD	WHITELIST TO Removed the restriction of "abuse@", "noc@", "postmaster@" and updated ROUTING the foreign IP address list
JM	ADD	Changed the CommTouch Temp Directory from the default (the machine default tempdir) to ...\Declude\scanners\commTouch\Temp
JM	ADD	Updated FROMNOMATCH test failing when e-mail is sent as an NDR
JM	ADD	Updated FROMNOMATCH test failing. According RFC-822 the angle bracket is not a requirement for FROM: in the header part of the email. Changed to handle the angle bracket and without.
EVA	FIX	Bug fix when virus.cfg is not found. EVA code is still executed and vulnerabilities are placed in the root of C:\ directory.
EVA	FIX	With this fix Virus code will not execute if no virus.cfg is found. E-mail will not be scanned for any virus or vulnerabilities
EVA	FIX	Removed all reference to EVA versions PRO/STD/LITE.
EVA	FIX	Fixed issue of TXT files being left in the work directory. Requires replacement of the avgsdk.dll.
EVA	FIX	Fixed Declude leaving an open socket during avg update. Also fixed for possibility of an early terminating thread in the transfer file function.
EVA	ADD	Update Declude encoding of winmail.data (TNEF) and storing the attachment file and its corresponding file name. Improved detection of the Invalid zip vulnerability.
EVA	ADD	Added error message in logs for additional information as to why txt file could not be moved back to virus directory
EVA	ADD	Invalid zip vulnerability; updated Declude to be compatible with '7z' file archived compressor
EVA	ADD	Updated Declude to report on ODBC access issues in Imail.
EVA	ADD	Updated PCRE to better handle pcre .dll exceptions
EVA	ADD	A virus log will be created in declude\logs and will inform the user that virus test is OFF.
DEC	ADD	Diags.txt, shows if AVG and CommTouch are ON or OFF
DEC	ADD	Updated Diags.txt, shows the copyright 2009 and the products, Junkmail, Hijack and EVA as either ON or OFF
DEC	ADD	Updated GP1 files to be amended rather than overwritten. Information will be appended with the system Date and time.
DEC	FIX	Removed all reference to versions PRO/STD/LITE
DEC	ADD	Removed references to previous Versions (PRO/STD/LITE).

Declude Security Suite 4.4.0 [17 March 2008]

Piece	Type	Change
EVA	ADD	Updated AVG (avgsdk.dll 1.3.511)
EVA	ADD	BANEXT EZIP for encrypted files .RAR can encrypt at the file name level requiring a password.
EVA	ADD	ALLOWVULNERABILITIESFROM example.com can be used with just domain
EVA	FIX	BANEZIPEXT ON blocking any encrypted file names
EVA	FIX	ALLOWVULNERABILITIESFROM error when non sender
EVA	FIX	Fix Header Vulnerability to accommodate Opera mail Client header format
JM	ADD	Updated PCRE (pcre3.dll 7.0)
JM	ADD	Updated Commtouch ZEROHOUR (asapskd.dll 5.05.8)
JM	ADD	Check the SmarterMail Domain Level for Trusted Sender in the domainconfig.xml
JM	FIX	PCRE on a match was writing additional information not pertaining to the match in the LOG
JM	FIX	PCRE found a match and the size of the match was > tan the buffer size.
JM	FIX	Declude produced an error when reading the envelope file (SM and IM), the HELO line can only be 512 according to RFC-821 we now truncate after 512 characters.
JM	FIX	HELO information was reported incorrectly when IPBYPASS is set
JM	FIX	Incoming and Outgoing messages being reported incorrectly
DEC	ADD	Can use #### for 4 digit year on log file names in the format ddmmyyy
DEC	ADD	Added date, Time, Email, Spool name, Weight and Tests failed to the BLKLST log
DEC	FIX	SmarterMail CMDSPACE test. This test was not triggered in the SmarterMail envelope as token was changed from "cmdspc" instead of "cmdspace" we check for both.
CFG	JM	DNS 208.67.220.220 for new installs
CFG	JM	STOPPROCESSINGONFIRSTDELETE set default ON
CFG	JM	NOLEGITCONTENT changed from -5 to -3
CFG	JM	SBL-UNCOMFIRMED removed
CFG	JM	ZEN Combined spamhaus entries aggregate 7
CFG	JM	SORBS changed from 5 to 7
CFG	JM	SPAMBAG removed
CFG	JM	TQMCUBED-DYNAMIC removed
CFG	JM	LNG combined spamguard entries aggregate 3
CFG	JM	NJABL combined njabl entries aggregate 4
CFG	JM	IADB changed from -8 to -10
CFG	JM	AHBL-DOMAINS changed from -5 to -10
CFG	JM	BOGUSMX changed from 1 to 2
CFG	JM	SURBL changed from 5 to 10
CFG	JM	URIBL-BLACK has been added
CFG	JM	ROUTING changed from 2 to 4
CFG	JM	SPFFAIL changed from 5 to 10
CFG	JM	SUBCHAR-x change to start at 55
CFG	DEC	THREADS default changed from 15 to 25
CFG	DEC	WAITFORMAILset to 3000 still 5000 by default
CFG	EVA	AVAFTERJM set to ON

Declude Security Suite 4.3.46 [16 April 2007]

Piece	Type	Change
EVA	ADD	Improved AVG virus database format for optimization
EVA	ADD	Improved speed of AVG scanning by 15-20%
EVA	ADD	Updated AVG (avgsdk.dll 1.2.449)
DEC	ADD	Updated Commtouch ZEROHOUR (asapsdk.dll 5.03.0013)
JM	FIX	Smartermail HELO was being picked up from the headers rather than the envelope
JM	FIX	Fixed log entry for PCRE when matching on location SUBJECT
CFG	EVA	EXITSCANONVIRUSDETECT ON as default
CFG	EVA	PRESCAN ON as default

Declude Security Suite 4.3.40 [12 March 2007]

Piece

Type

Change

DEC

FIX

ZEROHOUR passing weight to SM when email WHITELISTED

DEC

FIX

Ignore Case checking in Imail Address book 2006

FIX

Improved performance when OUTBOUNDSPAMSCANNING OFF

DEC

FIX

Updated CommTouch ZEROHOUR Dll

EVA

FIX

EXITSCANONVIRUSDETECT ON works between AVG and Commtouch

DEC

ADD

SM allows both email address and domain in their trusted sender
list, declude will match on either

ADD

Support for Regular Expressions in the Filters using PCRE library

CFG

EVA

Default for EVA logs changed from:
LOGFILE \spool\vir####.log
to
LOGFILE \Declude\Logs\vir####.log

CFG

Default for HI logs changed from:
LOGFILE \spool\hih####.log
to
LOGFILE \Declude\Logs\hi####.log

CFG

Default for JM logs changed from:
LOGFILE \spool\dec####.log
to
LOGFILE \Declude\Logs\dec####.log

CFG

Removed the following IP4R tests:

CSMA-SBL	IP4R	sbl.csma.biz	127.0.0.2	2
IPWHOIS	IP4R	ipwhois.rfc-ignorant.org	127.0.0.6	3
ORDB	IP4R	relays.ordb.org	*	5

CFG

Changed the weights on following IP4R tests:

UCEPROTECT-1	IP4R	dnsbl-1.uceprotect.net	127.0.0.2	8	0
UCEPROTECT-2	IP4R	dnsbl-2.uceprotect.net	127.0.0.2	7	0
to
UCEPROTECT-1	IP4R	dnsbl-1.uceprotect.net	127.0.0.2	4	0
UCEPROTECT-2	IP4R	dnsbl-2.uceprotect.net	127.0.0.2	4	0

Declude Security Suite 4.3.30 [7 February 2007]

Piece	Type	Change
DEC	ADD	Updated AVG and AVG dll's
DEC	ADD	Added hijackrelease.exe located under the \Tools directory used to move FP emails to the \spool
JM	FIX	Additional changes to accommodate Imail 2006 multiple address formatting for AUTOWHITELIST to work corrrectly
JM	FIX	Fixed AUTOWHITELIST OFF in Smartermail, this was not working turning off even when commented out.
JM	FIX	Fixed logging issue for Incoming vs.Outgoing email reported when Smarter Mail is used as a Gateway
EVA	ADD	New directive ALLOWVULNERABILITIESTO which allows vulberabilities to pass to a specified email or domain

Declude Security Suite 4.3.23 [7 December 2006]

Piece	Type	Change
DEC	ADD	New ZEROHOUR CommTouch Dll
JM	ADD	WHITELIST reason shown at LOGLEVEL HIGH
JM	ADD	AUTOWHITELIST for Imail 2006
JM	FIX	Default for the OUTBOUNDSCANNINGSPAM directive is now ON
JM	FIX	Declude crash fixed on corrupted From: line in the header part of the envelope file
JM	FIX	Broken Headers issue fixed
JM	FIX	Revised ROUTING spamrouting internal tables have to be updated to reflect domestic and offshore network blocks.
EVA	ADD	MIME header mismatch, Declude assumes it is an executable. If this test is turned off then the e-mail will not be caught as vulnerability. However, there is a log message that the mismatch was found and it is ignored because this directive is turned off. Located in the virus.cfg, default is ON MISMATCHEDEXT ON
EVA	FIX	Zip vulnerability, declude was holding a valid zip file as a vulnerability

Declude Security Suite 4.3.14 [28 September 2006]

Piece	Type	Change
DEC	ADD	BANCHARSET defined in the declude.cfg quarentines listed character sets Example: BANCHARSET iso-2022-jp BANCHARSET koi8-r
EVA	ADD	With AVAFTERJM ON the JM Log displays message moved to virus folder
JM	ADD	Spam checking for inbound/outbound scanning can be turned on/ off. Located as a directive in the global.cfg file, below are the default settings. OUTBOUNDSCANNINGSPAM ON INBOUNDSCANNINGSPAM ON
JM	FIX	IPBYPASS now takes place before WHITELIST
JM	FIX	Using HOLD action in the $default$.junkmail file, if an extra space was after %DATE% incorrect behaviour was observed, this is not been normalized
JM	FIX	X-COUNTRYCHAIN log entry no longer truncated
JM	FIX	DELETE_RECIPIENT removes the specified email address as per-user action only
DEC	FIX	On occasion ZEROHOUR initialized two overlaping threads causing decludeproc crash
HI	FIX	CONCATENATELOGS with KEEPINDIVIDUALLOGS works correctly

Declude Security Suite 3.1.3 [28 September 2006]

Piece	Type	Change
SM	FIX	Decludeproc will not start without a valid domainlist.xml
HI	FIX	CONCATENATELOGS with KEEPINDIVIDUALLOGS works correctly
JM	FIX	Declude crash fix. Buffer Overflow reading the From: line in the Headers
JM	FIX	With HOLD if extra space after %DATE% incorrect behaviour was observed this is not been normalized

Declude Security Suite 4.3.7 [3 August 2006]

Piece	Type	Change
JM	ADD	Added x-header for CommTouch RefID
JM	FIX	COPYFILE not working correctly when COPYFILEACTIONWITHHEADERS ON directive
JM	FIX	Declude crash fix. Buffer Overflow reading the From: line in the Headers
SM	FIX	Failed .hdr to be DELETED rather than moved to the \error director
HI	FIX	Spam messages set for HOLD and DELETE moved back to the Spool when intercepted by Hijack

3.1.1 [3 August 2006]

Piece	Type	Change
JM	FIX	COPYFILE not working correctly when COPYFILEACTIONWITHHEADERS ON directive
SM	FIX	QUEUEFILE_SAVEFILE the log is showing the correct directory path
SM	FIX	Failed .hdr to be DELETED rather than moved to the \error director
DEC	FIX	A Global variable being initialized more than once has been corrected
HI	FIX	Spam messages set for HOLD and DELETE moved back to the Spool when intercepted by Hijack
EVA	FIX	BANEXT buffer overflow
EVA	FIX	ALLOWVULNERABILITIESFROM (for user)

Declude Security Suite 4.3 [18 July 2006]

Piece	Type	Change
DEC	ADD	CommTouch Zero-Hour Virus Protection and Recurrent Pattern Detection Technology added. If you are subscribed to Declude for the CommTouch add-in, to enable, add/use the ZEROHOUR directive in the global.cfg file to control the weight associated with this test. ZEROHOUR 14
DEC	FIX	A Global variable being initialized more than once has been corrected

Declude Security Suite 4.2 Build 20 [6 July 2006]

Piece	Type	Change
EVA	ADD	New NONSTANDARDHDR vulnerability test. Messages found to have broken headers are moved to the \virus folder
EVA	FIX	ALLOWVULNERABILITIESFROM (for user)
EVA	FIX	BANEXT buffer overflow
SM	ADD	When an error is found in the envelope (.hdr) file the message is moved to the \error folder
SM	ADD	Decludeproc will not start without a valid domainlist.xml
SM	FIX	QUEUEFILE_SAVEFILE the log is showing the correct directory path
SM	FIX	Allows admin to set VIRDIR to any directory path in the virus.cfg

Declude Security Suite 4.2 Build 12 [24 May 2006]

Piece	Type	Change
EVA	ADD	Ability to configure the built-in AVG update interval which checks for updates. Default is once a day / minimum is one hour. Located int the declude.cfg add the following directive AVGUPDATEFREQHRS 6 (Note:AVGUPDATEFREQHRS)
EVA	FIX	AVG now reports name of virus found in log file
EVA	FIX	Performance and speed enhancement to the AVG database file downloads
JM	FIX	Buffer overflow fix

Declude Security Suite 4.2 Build 3 [2 May 2006]

Piece	Type	Change
EVA	ADD	BUILTINSCANNER OFF Located in Virus.cfg. Will disable the internal AVG scanner.
EVA	ADD	Integrated AVG Scanner into Decludeproc no configuration required.

3.1.0 & 4.1.0 [3 Apr 2006]

Piece	Type	Change
JM	ADD	Added Test MSGSIZE can be used to reduce weight on larger Emails
JM	ADD	Added Test FROMNOMATCH checks the sender in the envelope with the sender line in the header to see if they match.
SM	FIX	Implemented uniform handling in SmarterMail for v1/v2 and v3 domainList.xml formats
SM	FIX	Corrected issue with overwrite of masterhostname variable
SM	FIX	Corrected issue where COPYTO was not functioning correctly
SM	FIX	Weight added to envelope only if message is being passed on and not held or deleted
DEC	FIX	Corrected issue where some Declude variables were not being properly initialized

3.0.6.4 & 4.0.9.4 [13 Mar 2006]

Piece	Type	Change
HI	FIX	Corrected logging issue and locked file problem trying to move .hdr files in SmarterMail
SM	ADD	Support for MAILBOX action in Smartermail
CON	FIX	Confirm for Imail now working correctly

4.0.9 [20 Feb 2006]

Piece	Type	Change
JM	FIX	Log file changes for COUNTRY / COUNTRIES to eliminate duplication of lines
SM	ADD	Support for WHITELIST AUTH in Smartermail
SM	ADD	Support for CMDSPACE test in Smartermail
SM	ADD	Declude now passes total weight of Email directly back to Smartermail
IM	ADD	Enhanced move files to spool for older versions of IMail
JM	FIX	Fixed bug that occasionally caused Email to go to the wrong hold directory
DEC	ADD	Decludeproc -v now displays platform in addition to version
JM	FIX	Corrected bug that caused mishandling of message attachments when processing headers
SM	ADD	Added code to process new domain list format in SmarterMail 3.0 due to changes in XML file format

3.0.6 [20 Feb 2006]

Piece	Type	Change
JM	FIX	Log file changes for COUNTRY / COUNTRIES to eliminate duplication of lines
IM	ADD	Enhanced move files to spool for older versions of IMail
JM	FIX	Fixed bug that occasionally caused Email to go to the wrong hold directory
DEC	ADD	Decludeproc -v now displays platform in addition to version
JM	FIX	Corrected bug that caused mishandling of message attachments when processing headers
SM	ADD	Added code to process new domain list format in SmarterMail 3.0 due to changes in XML file format

3.0.5.23[29 Dec 2005]

Piece	Type	Change
JM	FIX	This release fixes a bug in the IMail version of Declude whereby the wrong service level (Pro, Standard, Lite) was being reported. This issue affected IMail users only.

3.0.5.21 [30 Nov 2005]

Piece	Type	Change
JM	ADD	INVITEFIX ON Located in Declude.cfg. Some customers had issues related to Outlook meeting requests appearing as text only. The default for this directive is OFF.
JM	FIX	Fixed skipping of certain DNSBL tests.
JM	FIX	STOPALLTESTS is now working correctly
AV	FIX	Incorrect log entries regarding to licensing with EVA
AV	ADD	Vulnerability Notifications available for Imail

3.0.5.20 [10 Nov 2005]

Piece	Type	Change
JM	FIX	Fixed un-initialized variable, causing CMDSPACE false positives.
JM	FIX	Fixed un-initialized variable, causing SPF false positive
JM	FIX	BITMASK test timeout error fixed
JM	FIX	Mishandled Winmail.dat / TNEF fixed

3.0.5.18 [4 Nov 2005]

Piece	Type	Change
ALL	FIX	Fixed un-initialized variable causing intermittent stop/start with the decludeproc service.
JM	FIX	Fixed SmarterMail incoming Email recipient domain aliases
AV	FIX	Fixed un-initialized variable, causing incorrect Virus Names.

3.0.5.14 [31 Oct 2005]

Piece	Type	Change
ALL	ADD	WINSOCKCLEANUP ON Located in Declude.cfg. Some customers had issues related to their network stack causing loss of functionality for basic network operations. The default for this directive is OFF
ALL	FIX	Memory leaked fixed by forcing windows to close handles once completed.

3.0.5.12 [26 Oct 2005]

Piece	Type	Change
ALL	ADD	Created a \proc\error directory for messages that cannot be moved by Decludeproc to the appropriate locations
ALL	ADD	When the \proc directory becomes empty and the threads in the work have completed all messages decludeproc resets the winsock
ALL	ADD	When the \proc directory is empty winsock cleanup will be called after the shorter of either the number of worker threads going to 0 or 5 minutes. Any files found in the work directory will then be moved to the \review directory.
ALL	FIX	Change default THREADS to 15 if no Declude.cfg is located
ALL	FIX	Change default WAITFORMAIL to 2000 if no Declude.cfg is located
JM	ADD	AUTOREVIEW ON Located in Declude.cfg. Email in the \review directory is automatically moved to the \proc directory when the service starts or when the proc directory is empty
HI	FIX	Removed deccon.exe to be replaced with new Console

3.0.5.3 [26 Sep 2005]

Piece	Type	Change
ALL	ADD	Declude.exe function changed to move files to \proc directory
ALL	ADD	Decludeproc.exe introduced to run as a service.
ALL	ADD	Decludeproc.exe creates \proc directory, \work directory \review directory.
ALL	ADD	THREADS 5 Located in Declude.cfg. Specifies the amount of threads declude uses to process Email.
ALL	ADD	WAITFORMAIL 30000 Located in Declude.cfg. Defined in milliseconds eg. 30000 = 30 seconds this can be changed to set the wait time that decludeproc will wait before checking the \proc directory once empty for new messages.
ALL	ADD	WAITFORTHREADS 1500 Located in Declude.cfg. Defined in milliseconds eg. 1500 = 1.5 seconds this can be changed so that when the maximum threads are in use this time specifics the wait before checking to launch more threads.
ALL	ADD	WAITBETWEENTHREADS 1 Located in Declude.cfg. Defined in milliseconds eg. 1 = 1 millisecond The time to wait between spawning one thread and starting to process another thread.

2.0.6 [11 Apr 2005]

Piece	Type	Change
ALL	ADD	Enhanced diagnostics to include the ability to send diagnostic information directory to Declude Technical Support.
ALL	ADD	Enhanced logging.
ALL	ADD	ProcessCounter - New application that will show the number of running Declude instances in the Windows system tray.
ALL	FIX	Added resolution to log if the 'Error starting deccon.exe message' was found.
JM	ADD	Added new directives for global.cfg - STOPPROCESSINGONFIRSTDELETE, COPYFILEACTIONWITHHEADERS, ACTIONSONCOPYALL, NOACTIONSONCOPYALLWHENWHITELISTED.
JM	ADD	New configuration file (optional) with new directives - PROCESSES, CONCATENATELOGSTHRESHOLD, CONCATENATELOGS, KEEPINDIVIDUALLOGS, ADJUSTFORLOAD.
JM	ADD	Added the option to hold spam by date - Adding %DATE% to the HOLD action will create date folder which will hold spam.
JM	ADD	(SMARTERMAIL ONLY) Added an overflow process for high volume.
JM	FIX	New DELETE_RECIPIENT action - Use this action to remove a recipient from a multi-receipt Email. Prior versions used the DELETE action causing confusion and other issues, DELETE will delete the entire Email, DELETE_RECIPIENT deletes individual users.
JM	FIX	(SMARTERMAIL ONLY) COPYFILE directive didn't copy both hdr and eml files

2.0.5 [14 Feb 2005]

Piece	Type	Change
ALL	FIX	Referencing a memory pointer that was not valid because of a fix to the Hijack product. This produced GP1 and GP2 files in the root of C:\ containing text similar to ‘couldn’t open headers datafile (are you running an on-access virus scanner?)’

2.0 [31 Jan 2005]

Piece	Type	Change
ALL	FIX	Fixes an issue where Declude could use an IP address in the Email body, if no IP appeared in the Email headers.
ALL	FIX	Ensures correct identification of message subject
AV	ADD	ADD Adds detection of bogus .EXE files (including 0-byte .exe files) to Declude Virus Pro
AV	ADD	ADD Adds support for %REVDNS% variable to show reverse DNS entry of remote mailserver
AV	ADD	ALLOWVULNERABILITIESFROM option that instructs Declude Virus to allow vulnerabilities from a specific Email address.
AV	ADD	Adds support for event logging to Declude Virus.
JM	FIX	Changes DELETE action to only delete the Email for recipients using the DELETE action (so it will deliver to any other recipients)
JM	FIX	Changes logging so that all log file entries for a given Email will be grouped together.
JM	ADD	Changes HOLDaction so that users can specify the directory to hold spam in.
HI	ADD	Adds support for event logging to Declude Hijack.

1.81 [1 Oct 2004]

Piece	Type	Change
AV	FIX	Fixes a problem with false positives in Microsoft's " GDIPlus.dll JPEG exploit" detection.
AV	FIX	Changes "GDIPlus.dll JPEG Exploit" detection to be run on any JPEG file, regardless of extension.
JM	FIX	Fixes a problem where "LOG_OK NONE" option would display " Message OK" lines in log file.
JM	FIX	Fixes a problem where "LOG_OK NONE" option would display " Tests Failed:" lines in log file.

1.80 [28 Sep 2004]

Piece	Type	Change
AV	FIX	Enhances Object Data vulnerability detection
AV	FIX	Encrypted .RAR files were only blocked in the Pro version; fixed.
AV	FIX	Could incorrectly detect Outlook 'MIME Headers' Vulnerability; fixed.
AV	FIX	Code added to prevent too many BANEXT/SKIPEXT options from causing crashes.
AV	FIX	"PK00" .ZIP files would get caught as encrypted; fixed.
AV	FIX	Fixes an issue where a crash could occur if an on-access virus scanner blocked a .ZIP file
AV	FIX	Will no longer delete vulnerabilities with DELETEVIRUSES ON
AV	FIX	Will now re-try moving of virus-laden D*.SMD files for up to 60 seconds (every 2 seconds)
AV	FIX	Makes a change to help ensure that Outlook CR Vulnerability does not occur if more than 16K of headers
AV	FIX	BANEXT EZIP now takes priority over BANEXT ZIP
JM	FIX	WHITELIST IP would whitelist Emails sent from imail1.exe; fixed.
JM	FIX	Fixes an issue where people with many tests using WARN action could cause problems
JM	FIX	%WEIGHT% variable will now work everywhere
JM	FIX	Changes %WEIGHT% to calculate weight properly if spam tests haven't been run.
JM	FIX	NOTENDSWITH would not work properly on some matches; fixed.
JM	FIX	SUBJECT filter could have false positives in rare cases; fixed.
JM	FIX	Fixes an issue where an altered subject could have first character missing.
JM	FIX	Will now only wait 5 minutes for an external program to finish, rather than an hour.
JM	FIX	Fixes an issue with filters with '~' character in them.
AV	ADD	Detects invalid .ZIP vulnerability.
AV	ADD	Detects bogus CPL files (Declude Virus Pro).
AV	ADD	SKIPIFEXT option added for .eml files (IE 'SKIPIFEXT EZIP').
AV	ADD	Detection of Microsoft GDIPlus.DLL JPEG vulnerability.
JM	ADD	CONTSPACES test to detect more than X continuous spaces in the subject.
JM	ADD	Added NOTCONTAINS, NOTIS filter types.
JM	ADD	STOPATFIRSTHIT option added to filters (for example, STOPATFIRSTHIT, so any hit in file will stop further processing of this filter).
JM	ADD	STOPALLTESTS option added to filters (for example, "BODY STOPALLTESTS CONTAINS Evil Spammer")
JM	ADD	MINWEIGHTTOFAIL option added to filters (requiring that the filter reach a certain weight before it will be triggered).

1.79 [Beta, 05 Apr 2004]

Piece	Type	Change
ALL	FIX	Added code to bypass IMail v8.1's duplicate scanning of forwarded Emails.
AV	FIX	Fixes issue with previous beta and incorrect "Waiting for activation code" header.
AV	FIX	BANNAME would produce a blank %BANEXT% variable; now shows full name.
AV	FIX	Removes " virus !!!" from end of virus names produced by McAfee.
AV	FIX	PRESCAN ON setting will now scan Email with "<IFRAME" in them.
AV	FIX	Will now skip over .GSC/.GSE files to improve performance and ensure no loops can occur.
JM	FIX	"Tests Failed" log file entry will now include all tests (not just ones with an action of LOG or higher or a weight not equal to 0).
JM	FIX	Subject filters will now work on both decoded and undecoded versions of subject.
JM	FIX	DOMAINWHITELISTS option fixed.
JM	FIX	Fixes an issue that could force IGNORE action to be used if more than 100 tests were defined.
JM	FIX	Fixes an issue with an infinite loop that could occur in SPF processing with invalid SPF strings.
JM	FIX	Fixes an issue that could cause UNKNOWN VAR to appear on the 42nd test (and multiples thereof).
AV	ADD	Adds BANEXT EZIP option to ban all encrypted .ZIP files.
AV	ADD	Adds BANZIPEXTS option (Declude Virus Pro) to check .ZIP files for banned file extensions (BANEXT).
AV	ADD	Adds BANEZIPEXTS option (Declude Virus Pro) to check encrypted .ZIP files for banned file extensions (BANEXT).
AV	ADD	Adds .PIF, .SCR, .COM, and .BAT vulnerability detection (invalid file types) for Declude Virus Pro.
AV	ADD	Adds OBJECT DATA vulnerability detection (used by Bagle.Q, Bagle.R).
AV	ADD	Adds virus name to headers of quarantined virus Emails.
JM	ADD	COPYFILE action to copy the IMail D.SMD and Q.SMD files to a specific directory (for example, "WEIGHT10 COPYTO C:\IMail\spool\weight10\").

1.78 [Beta, 18 Feb 2004]

Piece	Type	Change
JM	FIX	Emails greater than 32K could have invalid characters appear in base64 MIME decoding, causing filters to be incorrectly triggered in rare cases; fixed.
JM	FIX	Subject would not be added to rare Emails without a body; fixed.
JM	FIX	IPBYPASS limit increased from 20 to 100 entries.
JM	FIX	If an invalid variable was encountered, headers might have become corrupt; fixed.
JM	FIX	Fixes a rare issue where wrong actions could be used.
JM	FIX	Fixes a rare issue with external tests where locked files might not be processed properly.
JM	FIX	HIDETESTS option would not work properly; fixed.
JM	FIX	Filter WARN messages will now have weight as total weight, including the weight of the test itself.
JM	FIX	END statement in filter will now work properly.
JM	FIX	"fromfile" test type will now stop processing at first match..
JM	FIX	BADHEADERS test will no longer fail if To: not present but Bcc: is.
JM	FIX	Tests with DUHL in the name will now be skipped after first hop..
JM	FIX	HTML code removal will now work with CRLFs in HTML tags.
JM	FIX	"ipfile" test type warning message will now start at first nonwhitespace character.
JM	FIX	Fixes an issue with recipients in Emails sent from IMail v8 web messaging.
JM	FIX	LOGLEVEL LOW will now have 1 line with tests that fail ("HELOBOGUS=WARN SPAMCOP=DELETE", etc.). LOGLEVEL HIGH will have the old one line per test, with the warning message.
JM	FIX	MAILFROM test will now catch just "username".
JM	ADD	DOMAINWHITELISTS ON option, to allow for per-domain whitelist files at \IMail\Declude\example.com\whitelist.txt.
JM	ADD	New tests "dow" and "hour", to allow hour and day-of-week detection. IE "HOUR hour 9 16 0 0" for local 9AM->4:59PM. DOW dow 1 5 0 0 for Monday through Friday.
JM	ADD	Adds TESTSFAILED searching for filters (for tests that have already run). For example, "TESTSFAILED END CONTAINS SPAMCOP".
JM	ADD	New test "spf" added for SPF support.
JM	ADD	Filters can now have "WHITELIST" command to whitelist an Email ("SUBJECT WHITELIST CONTAINS [Declude.JunkMail]")
JM	ADD	Adds NOTENDSWITH option to filters ("REVDNS 0 NOTENDSWITH .aol.com").
JM	ADD	Adds CIDR option to filters ("REMOTEIP 0 CIDR 192.0.2.0/24").
JM	ADD	Adds CMDSPACE test to help detect spamware in SMTP commands.
JM	ADD	Now will decode encoded subjects (for use in filters).
AV	FIX	Had an internal limit of 20 forging viruses; changed to 200.
AV	FIX	Prevents false positives where "begin " followed by "." causes uudecoding to occur.
AV	FIX	Prevents notifications from being sent out with the Outlook CR Vulnerability, if an unusual RCPT TO: occurred with an LF in it.
AV	FIX	Fixes an issue where if 2nd virus scanner reported filename (not number), it would be used instead of "good" filename from first scanner.
HI	FIX	Increases ALLOWIP limit to 100 entries.

1.77 [Beta, 04 Dec 2003]

Piece	Type	Change
AV	FIX	Space Gap detection will now obey BANCRVIRUSES setting.
AV	FIX	BANNAME option would cause problems when too many entries were used; fixed.
JM	FIX	COMMENTS test now works on "greater than or equal" rather than "greater than".
JM	FIX	Fixes an issue with the MAILFROM test, where it would get triggered on a DNS response with no NS records.
JM	FIX	In certain multi-hop scenarios, bogus IPs (such as "?.?.?.?") would get scanned; fixed.
JM	FIX	"bypasswhitelist" option wouldn't work with WHITELISTFILE or AUTOWHITELIST; fixed.
JM	FIX	ENDSWITH would not work properly in certain rare cases; fixed.
JM	FIX	PERCENT test now catches quotes; IE: '"user@example.com"@example.com'.
JM	FIX	BOUNCE action renamed to BOUNCEONLYIFYOUMUST (due to huge amounts of spam being sent out by our customers!).
JM	FIX	Fixes issue where per-user whitelisting or AUTOWHITELIST might not work.
JM	FIX	Fixes an issue when SUBJECT action was too long.
JM	ADD	"filter" test type now can have MAXWEIGHT/MINWEIGHT option.
JM	ADD	"filter" test type now can have "END" in place of the weight (any match will 'turn off' test).
JM	ADD	%TESTSFAILEDWITHWEIGHTS% variable, which includes weights along with the tests that failed.
JM	ADD	"filter" test type now has SKIPIFWEIGHT option to bypass filters if a certain weight has already been reached.
JM	ADD	HIDETESTS option to hide tests from X-Spam-Tests-Failed: header.
AV	ADD	Detection of new "Outlook 'Space Gap' Vulnerability" variants.
AV	ADD	Added SKIPIFFORGING option for .eml files.
AV	ADD	Added ONLYSENDIFVIRUSNAMEHAS option.
AV	ADD	Added %LOCALRECIPS% variable that only lists local recipients.

1.76 [Beta, 19 Sep 2003]

Piece	Type	Change
JM	FIX	Fixes a rare issue with CNAMEs in reverse DNS lookups.
JM	FIX	Prevents EASYNET-DYNA test from working with 2nd and further hops.
JM	FIX	Automatically detects wildcards from TLD parents (such as non-existent .com/.net domains).
JM	ADD	ANYWHERE filter type (for example, "ANYWHERE 0 CONTAINS something"), to search both headers and body.
JM	ADD	WHITELIST AUTH option in global.cfg file, which automatically whitelists authenticated senders (for IMail v8 and later).
JM	ADD	Adds a bypasswhitelist test type that can be used in rare cases when whitelist bypassing is necessary.
AV	ADD	BANNAME option, to ban file names (such as "BANNAME message.zip").
AV	ADD	Automatic detection of forging viruses (via DNS). To turn off, use "AUTOFORGE OFF".
AV	ADD	Adds ONLYSENDIFRECIP and ONLYSENDIFIP options for .eml files that should only be sent to specific recipients or IPs.

1.75 [Release, 22 Jul 2003]

Piece	Type	Change
JM	FIX	Reverse DNS entry variable could get corrupted; fixed.
JM	FIX	Filters that have no string to look for will no longer match all Emails (IE "BODY 0 CONTAINS ").
JM	FIX	Fixes an issue where first recipient could not use global.cfg file if no copyall_account was used.
JM	FIX	Could have a "Misconfiguration: WHITELISTFILE is not an action" line in log file; fixed.
JM	FIX	"Multiple headers/footers can now be used" removed (since multiple headers/footers would appear if multiple recipients).
JM	FIX	With AUTOWHITELIST, SUBJECT action on one recipient would be used even if a later recipient was AUTOWHITELISTed; fixed.
JM	FIX	A filter with "BODY ISBLANK" will now work.
AV	FIX	A crash could occur with broken (long) BinHex lines; fixed.
AV	FIX	BANCRVIRUSES option would not control Conflicting Encoding vulnerability; fixed.
AV	FIX	Will no longer report "Error 0 in virus scanner...".
AV	FIX	File banning will now take priority over an internal error.
AV	FIX	Will now process (malformed) MIME boundaries within uuencoded segments.
AV	FIX	A crash could occur with too many recipients; fixed.
AV	FIX	Will no longer show "To: copyall_account" in log file if copyall account used.
JM	ADD	%BODY% variable, which displays the body of the Email.

1.70 [Beta, 29 May 2003]

Piece	Type	Change
ALL	FIX	Makes sure that vacation messages do not get scanned.
ALL	FIX	%RECIPHOST% will now ignore recipients that IMail rejects.
AV	FIX	Will now use the virus name from the first scanner, if multiple scanners are used.
AV	FIX	Will prevent an error if MIME files recurse more than 50 layers deep.
AV	FIX	Will now look at both intended and actual recipient addresses for per-user settings.
JM	FIX	AUTOWHITELIST wasn't working properly; fixed.
JM	FIX	SPAMDOMAINS test will now not get triggered if reverse DNS times out.
JM	FIX	Emails with lots of recipients could prevent actions from being taken on some recipients; fixed.
JM	FIX	Fixes an issue where sender might not be seen as local.
JM	FIX	BASE64 test will now work on "single attachment with no body" Emails; so will base64 filtering.
JM	FIX	REVDNS test will now handle CNAMEs properly.
JM	FIX	Filters will now process 8-bit characters properly.
JM	FIX	Will now use a public DNS server if no DNS servers are listed in IMail settings.
JM	FIX	COMMENTS test will now also work with any made-up tag beginning with "
JM	FIX	SPAMDOMAINS test will now allow an alias (IE "hotmail.com msn.com" to check @hotmail.com, but allows either hotmail.com or msn.com in reverse DNS entry) .
JM	ADD	DOSENDERACTIONS ON option to allow for actions based on the sender of the Email (in Declude Junkmail Pro).
JM	ADD	PREWHITELIST ON option to automatically bypass spam tests for Email from whitelisted IPs or whitelisted return addresses.

1.69 [Beta, 16 Apr 2003]

Piece	Type	Change
ALL	ADD	Added %REALRECIPS% variable that lists actual recipients (as opposed to %ALLRECIPS%, that lists intended recipients).
JM	FIX	Certain action combinations would not work (IE ALERT and ROUTETO); fixed.
JM	FIX	"whitelistfile" option will now work as an exact match, unless starts with '@' or '.'.
JM	FIX	MAILFROM and HELOBOGUS tests will now fail if localhost is returned as MX record (even if no 127.0.0.1 IP returned).
JM	FIX	Will now properly handle 1-character header extension (IE "Subject: Bla\r\n h").
JM	FIX	"nonenglish" test enhanced to detect subjects with highbits set.
JM	FIX	Declude JunkMail headers will be added to Declude Virus caught Emails again.
JM	FIX	Whitelisting of 'all@example.com' (IE in autowhitelist) wouldn't worked; fixed.
JM	FIX	Multiple headers/footers can now be used (IE "[This Email failed DSBL]" and "[This Email failed SPAMCOP]").
JM	ADD	Support for HTML non-comments (IE "This is spam"), and CRLFs ("mortgage quotes").
JM	ADD	WHITELIST HELO option, WHITELIST SUBJECT option.
JM	ADD	"spamdomains" test ("SPAMDOMAINS spamdomains c:\sd.txt..."; if sd.txt has 'hotmail.com' in it, then all Email from 'hotmail.com' must have 'hotmail.com' in reverse DNS).
JM	ADD	"bcc" test (IE "BCC bcc 2 ..." to catch Emails with 2 or more Bcc:'s that Declude JunkMail knows of). Will get triggered on lists!
JM	ADD	"nolegitcontent" test (like IPNOTINMX, it is designed to give a negative weight to legitimate Email).
HI	ADD	ALLOWADDR option, to allow up to 20 Email addresses to send unlimited Email.

1.68 [Beta, 19 Mar 2003]

Piece	Type	Change
ALL	FIX	Enhancements to Declude Queue.
ALL	FIX	Local hostname could appear as "copyall_account"; fixed.
ALL	FIX	Fixed an issue where %NRECIPS% could be double the actual count.
CON	FIX	Declude Confirm wouldn't work properly when a copyall account was used; fixed.
AV	FIX	Will now scan Email for viruses before checking for hijacking in Declude Hijack.
JM	FIX	Fixed an issue where the 'comments' test type would catch comments that shouldn't have been caught.
JM	FIX	%NRECIPS% variable is no longer limited to 100.
JM	FIX	Will no longer add Declude JunkMail headers (except XSENDER and XSPOOLNAME) if a virus is found.
JM	FIX	MAILFROM and HELOBOGUS tests will now fail if 127.0.0.1 is returned as IP.
JM	FIX	MAILFROM and HELOBOGUS tests will now fail if non-FQHN is found and a server failure occurs..
JM	FIX	Outgoing WARN, HEADER, FOOTER actions had been restricted to 64 characters; fixed.
JM	FIX	PERCENT test will now check both intended address and actual address, to catch quoted percent hack.
JM	FIX	Whitelist files will now work as exact matches, rather than partial matches.
JM	ADD	Adds "nonenglish" test type.
JM	ADD	Adds "subjectchars" and "subjectspaces" tests, which catch long subjects or subjects with lots of spaces.
JM	ADD	Adds "dnsbl" test type to support new DNS-based spam tests (such as HELO-based tests).
JM	ADD	Adds %IP4R%, %RHSBL%, %MAILFROMBL% and %HELO% variables.

1.67 [Beta, 03 Feb 2003]

Piece	Type	Change
ALL	FIX	Fixes an issue where truncated names may appear in %ALLRECIPS% variable.
ALL	FIX	DAISYCHAIN option wouldn't work with full paths; fixed.
AV	FIX	Will now catch viruses even if there are stray headers in base64 segment.
AV	FIX	Would try sending to "postmaster@copyall_account" for gatewayed domains; fixed.
AV	FIX	Fixes a potential crash if a Content-Transfer-Encoding: header was >1000bytes.
JM	FIX	Fixes an issue from 1.66 with Declude JunkMail Pro where it could crash if not all test actions defined in global.cfg file.
JM	FIX	Would whitelist all Email if "WHITELIST TODOMAIN" was used with the domain of a copyall account; fixed.
JM	FIX	Fixes an issue where ip4r tests might not work on Lite version.
JM	FIX	WHITELISTFILE option would cause problems with other Emails that should not have been whitelisted; fixed.
JM	FIX	WHITELISTFILE option wouldn't allow '.example.com'; fixed.
JM	FIX	WHITELISTFILE now allows format of "WHITELISTFILE @example.com C:\file.txt" or "WHITELISTFILE user@example.com C:\file.txt".
JM	FIX	REDIRECT will now allow domain redirecting ("REDIRECT @example.com filename...").
JM	FIX	COPYTO action can now work on outgoing Email.
AV	ADD	ONLYSENDIFSENDER option added for .eml files.
AV	ADD	Adds detection of Outlook 'Long Filename' Vulnerability.
JM	ADD	Adds %USER% variable, which will allow 'TESTNAME ROUTETO spam-%USER%@example.com'.
JM	ADD	Adds "AUTOWHITELIST ON" option in global.cfg file, which will use address books as whitelists ("all@all.com" will whitelist all incoming Email; "all@example.com" will whitelist all Email from @example.com).
JM	ADD	Adds "comments" test type to detect anti-filtering HTML comments.

1.66 [Beta, 17 Jan 2003]

Piece	Type	Change
ALL	FIX	Fixed an issue with handled invalid registry entries.
ALL	FIX	Will no longer have 'could not unlock file' warning when an external program deletes a .smd file.
AV	FIX	Would detect bogus .EXT files incorrectly; fixed.
AV	FIX	Will no longer false positive on Emails with the word 'begin' and '.com' on the same line.
AV	FIX	MIME segment in MIME preamble would be caught even with BANCRVIRUSES OFF; fixed.
AV	FIX	Will no longer try to send notifications to "[forged]".
AV	FIX	Will now add [incoming] or [outgoing] to To/From line at LOGLEVEL MID.
AV	FIX	Will now report the virus name at LOGLEVEL LOW, in "are INFECTED" line.
JM	FIX	Will now only run external tests once each, for better performance.
JM	FIX	Will now cache DNS entries when multiple ip4r tests are run on same zone.
JM	FIX	Multiple address aliases now work properly.
JM	FIX	0.x.x.x and 127.x.x.x will no longer have reverse DNS looked up.
JM	FIX	Will now keep a larger portion of the Email in memory, for improved filtering.
JM	FIX	Can now define an unlimited number of spam tests (was previously limited to 256).
JM	FIX	Will now automatically bypass lines with no IP in them.
JM	FIX	PERCENT test will now catch colons (IE "@declude.com:user@example.com").
JM	ADD	External tests definitions can now be defined with "<50" ">50" instead of value or "nonzero".
JM	ADD	Per-user/per-domain whitelisting ("WHITELISTFILE filename" in a .junkmail file).
JM	ADD	Adds WHITELIST REVDNS (IE "WHITELIST REVDNS yahoo.com")
AV	ADD	SKIPIFRECIP option (IE "SKIPIFRECIP @example.com" or "SKIPIFRECIP user@example.com").

1.65 [Release, 11 Dec 2002]

Piece	Type	Change
AV	FIX	Fixes an issue with 'Mismatched extensions' catching legitimate Emails in rare circumstances.
AV	FIX	Will now allow multiple identical 'Content-Transfer-Encoding' lines without triggering a vulnerability.

1.64 [Beta, 04 Dec 2002]

Piece	Type	Change
AV	FIX	'Mismatched extensions' vulnerability changed to only check file extension, not full name.
AV	FIX	'Conflicting Encoding' vulnerability will no longer catch RFC822 Emails-within-Emails.

1.63 [Beta, 25 Nov 2002]

Piece	Type	Change
AV	FIX	Will now ignore comments within RFC822 headers.
AV	FIX	Saveable plaintext Emails with a filename but no extension will now be scanned.
AV	FIX	Fixes an issue where .wav MIME header vulnerabilities might not get caught.
AV	FIX	will now get file extensions for filenames ending in a period.
AV	FIX	Can now have 8-bit characters in the FOOTER option.
AV	FIX	Banned file information (To/From/Subject) will now be recorded at LOGLEVEL MID.
AV	FIX	Will now process headers with no space after the colon.
AV	FIX	Will now start AV processes with inherited handles, to help with an issue with FSAV.
AV	FIX	Fixes an issue where multilayer Emails could get caught with MIME preamble vulnerability.
AV	FIX	BANEXT htm/html will no longer catch text/html MIME segments.
AV	FIX	Will now treat mismatches file extensions (IE eicar.com and eicar.txt) and .exe's.
JM	FIX	Can now have 8-bit characters in XINHEADER/XOUTHEADER options.
JM	FIX	Fixes a problem that could occur when lots of ip4r tests were defined.
JM	FIX	Will now automatically bypass SMTP32-FWD lines.
JM	FIX	Will now cut off ", " at end of ALLRECIPS option, to improve filtering.
JM	FIX	Whitelisting a TODOMAIN would cause Habeas Headers whitelist to take effect; fixed.
JM	FIX	Fixes an overflow and infinite loop problem with ALLRECIPS filter.
JM	FIX	An undocumented test was removed due to support requirements.
JM	FIX	ALLRECIP filtering option will now work with both intended and actual recipient addresses.
JM	FIX	'Couldn't move/copy datafile' warning will no longer occur if an external test deletes the Email.
JM	FIX	Bogus CIDR ranges in whitelisting will now be treated as /32's.
AV	ADD	SKIPIFVIRUSNAMEDOESNOTHAVE option added for .eml files.
AV	ADD	Added detection of Outlook 'MIME Section in MIME Preamble/postamble' vulnerability detection.
AV	ADD	Detection of 'Conflicting Encoding' vulnerability added.
JM	ADD	Added ALLRECIPS filter

1.62 [Beta, 04 Nov 2002]

Piece	Type	Change
AV	FIX	Changes uuencoded detection to prevent false positives.
AV	FIX	Some vulnerabilities could produce many log file entries; fixed.
AV	FIX	Per-user/per-domain "ON" settings will now override any "OFF" settings.
JM	FIX	Will now handle multiple return codes in ip4r tests.
JM	FIX	will now record the action for each test that fails.
JM	FIX	Changes handling of invalid "[?.?.?.?]".
JM	FIX	External tests can now have variables in their definitions.
JM	FIX	Adds a failsafe for invalid CIDR ranges in IP blacklists.
AV	ADD	%NOUNKNOWNVIRUSNAME% variable that will return the virus name, or nothing if "Unknown Virus".
AV	ADD	SKIPIFSENDER option for .eml files (such as "SKIPIFSENDER @example.com").
JM	ADD	Adds COUNTRY (of remote mailserver) and COUNTRIES (of any mailservers in chain) to filter.
JM	ADD	Adds %COUNTRYCHAIN% variable.
JM	ADD	Adds "ipnotinmx" test, which catches Email sent from an IP not in the MX records of sending domain.
JM	ADD	HABEAS whitelist type, for whitelisting Emails with Habeas headers ("WHITELIST HABEAS").
JM	ADD	New "habeas" test type, to allow for negative weighting of Emails with Habeas headers.

1.61 [Beta, 23 Sep 2002]

Piece	Type	Change
AV	FIX	Added detection of many new vulnerabilities.

1.60 [Release, 13 Sep 2002]

Piece	Type	Change
JM	FIX	Fixes a problem with bogus headers that were too long.
JM	FIX	Will now properly handle Subject: headers with no space after "Subject:".
JM	FIX	WHITELIST IP will now only work as exact match, unless it ends in "." (to prevent '10.10.10.1' whitelisting '10.10.10.10').
JM	ADD	New "base64" test type (beta).
AV	ADD	Detection of "Partial Vulnerability" ("Fragmented").

1.58 [Beta, 27 Aug 2002]

Piece	Type	Change
ALL	FIX	Fixes an issue where SendName registry entry could be incorrectly changed back to Declude.exe.
ALL	FIX	Takes care of a rare problem that could occur when Email headers are added.
JM	FIX	Fixes a problem that could occur with "fromfile" test type.
JM	FIX	Whitelist log file entry will now show which log file entry caused the Email to be whitelisted.
JM	FIX	Fixes an issue where a corrupt To: address could cause Declude JunkMail not to work properly.
JM	FIX	Reverse DNS entries with a trailing "." will now have them removed (so the "ENDSWITH" filter type will work as expected).
JM	FIX	"fromfile" test type will now only use exact match (so "name@example.com" will no longer catch "username@example.com").
JM	FIX	Will now get correct IP when HELO/EHLO appears with brackets.
JM	FIX	%TESTSFAILED% will now return "Whitelisted" if an Email is whitelisted.
JM	FIX	Fixes an "nwhitelists>200" error that could occur if reverse DNS entries appeared in parentheses in the Received: header.
JM	FIX	DNS engine changed to support IPv6 entries in packets that Declude JunkMail receives.
AV	FIX	Workaround for an IMail bug that sends bogus filenames when a root directory is used for the spool ("D:\\...").
AV	FIX	Fixes a problem where Mac files with no extension could get caught if an EOF occurred.
AV	FIX	Allows "TEMPDIR D:\" (before, only "TEMPDIR D:" would work).
AV	FIX	Switches priority of SKIPEXT/BANEXT, so files will be banned if they are listed as both SKIPEXT and BANEXT.

1.57 [Beta, 30 Jul 2002]

Piece	Type	Change
JM	FIX	HELOBOGUS will now only be tested on non-local senders.
JM	FIX	HELO detection wasn't using correct hop; fixed.
JM	FIX	An issue STARTSWITH in filter was fixed.
JM	FIX	ROUTETO/COPYTO can now use variables (IE "spam@%LOCALHOST%").
JM	FIX	Fixes an issue where starting external programs could fail (0xC0000142 error without a .DLL listed).
JM	FIX	Takes care of possible whitelist corruption when certain Received: headers were processed.
JM	ADD	IS filter type.
JM	ADD	ENDSWITH filter type.
JM	ADD	HEADERS filter location.
JM	ADD	REDIRECT option in config files to allow configuration "groups".

1.56 [Beta, 10 Jul 2002]

Piece	Type	Change
AV	FIX	Email addressed with a trailing dot ("user@example.com.") will now use per-user/per-domain settings.
AV	FIX	Will not trigger MIME vulnerability for attachment-only (no body) .wav/.mpg Emails.
AV	FIX	Makes sure that unnamed attachments will not get banned based on extension (Content-ID:).
AV	FIX	BANCRVIRUSES will now control blank folding vulnerability as well.
JM	FIX	External programs now started as detached processes.
JM	FIX	Will now log tests that fail, if they have a weight, even if IGNORE action is used.
JM	FIX	BADHEADERS test will now catch bogus non-standard headers (with no ":").
JM	FIX	HELO of $domain will set off BADHEADERS instead of SPAMHEADERS.
JM	FIX	HELO will now honor HOP settings.
JM	FIX	Support added for DNS-based spam tests that return CNAMES and multiple values.
JM	FIX	DUL tests will now be skipped for local users.
JM	ADD	"weightrange" test type to allow for a range of weights (IE 10 through 15).

1.55 [Beta, 18 Jun 2002]

Piece	Type	Change
ALL	FIX	Fixes issue with FOOTER action and Emails with a CTRL-Z in them.
JM	FIX	Renamed FOLDER action to MAILBOX to prevent massive confusion with directories.
JM	FIX	Fixes an issue with IP checking changes in 1.54 on multi-hop setups.
JM	FIX	ATTACH action can now use %WARNING% variable.
JM	ADD	Adds "externalplus" test type, where a exit code of 1 will whitelist an Email (2-9 are reserved).
JM	ADD	Adds "weight" response type for external test type, to indicate that the exit code is a weight.
JM	ADD	Adds "weightmatch" test type, to indicate an exact match (IE will only get triggered if the total weight is 10, but not if it is 11).
JM	ADD	Adds "filter" test type.
AV	ADD	Support for Outlook MIME headers exploit detection.
AV	ADD	FORGINGVIRUS option to set sender of virus to [Forged].

1.54 [Beta, 07 Jun 2002]

Piece	Type	Change
JM	FIX	Will now properly handle IP addresses in parentheses in Received: header.
JM	FIX	%WEIGHT% will now show as 0 for whitelisted Email.
JM	FIX	WHITELIST TO can now be used on Standard version, for abuse@ and postmaster@ addresses.
AV	ADD	SUBJECT configuration option to alter subject for virus scanned Email (IE "SUBJECT [Virus Scanned]").
JM	ADD	LOOSENSPAMHEADERS configuration option to skip Message-ID: header check in SPAMHEADERS test.
JM	ADD	HELOBOGUS test to verify that HELO text is valid with an MX or A DNS record.
JM	ADD	New FOLDER action (Pro version only) to move spam to a folder.
JM	ADD	New COPYTO action (Pro version only) to copy spam to a specific Email address.
JM	ADD	New ROUTETO action, to re-route spam to a specific Email address.

1.53 [Release, 11 May 2002]

Piece	Type	Change
AV	FIX	Last 2 bytes of base64-encoded segments might not get saved; fixed.

1.52 [Release, 09 May 2002]

Piece	Type	Change
AV	FIX	On-access scanners without command line scanners no longer need a stub program.
JM	FIX	CIDR ranges no longer need non-significant bits set to zero (IE "192.168.112.1/24" is OK now)
JM	FIX	Now supports CIDR /32 range for a single IP (IE "10.123.2.44/1").

1.51 [Beta 01 May 2002]

Piece	Type	Change
ALL	FIX	More tweaking with mailing list Emails.

1.50 [Beta 26 Apr 2002]

Piece	Type	Change
ALL	FIX	Mailing list Emails may have been delayed 1-2 hours; fixed.
AV	FIX	"Blank Folding" Outlook vulnerability could get triggered with RFC822 attachments; fixed.
JM	FIX	WHITELIST TO and WHITELIST TODOMAIN might not have worked in certain situations with multiple recipients; fixed.
ALL	ADD	DAISYCHAIN option to allow for programs other than smtp32.exe to be called after Declude.

1.49 [Beta 24 Apr 2002]

Piece	Type	Change
AV	FIX	Fixed an issue with uudecoding that came up in the previous release.

1.48 [Beta 23 Apr 2002]

Piece	Type	Change
ALL	FIX	.LST files will no longer need to be scanned.
JM	FIX	Problem with new ATTACH action and message bodies >8K; fixed.
AV	ADD	An issue with ONACCESS ON setting fixed.
AV	ADD	Improved base64/uudecoding funcionality
AV	ADD	Detection of Outlook "Blank Folding" vulnerability.

1.47 [Beta 22 Apr 2002]

Piece	Type	Change
JM	FIX	DNS engine changed to prevent a temporary handle loss if no DNS packet returned.
JM	FIX	WHITELIST and ipfile test type now can use CIDR ranges (IE 192.168.0.0/16 or 10.11.12.0/24).
AV	ADD	SKIPIFVIRUSNAMEHAS can now be in the headers of .eml files to prevent the notification from getting sent for certain viruses (IE "SKIPIFVIRUSNAMEHAS Klez").
JM	ADD	WHITELIST TODOMAIN to whitelist all mail for a domain (IE "WHITELIST TODOMAIN example.com").
JM	ADD	WHITELIST TO (Pro version only) to whitelist all mail for a user (IE "WHITELIST TO user@example.com").
JM	ADD	Added ATTACH action (Pro version only), which converts an annoying spam into a more pleasant attachment (uses \IMail\Declude\spamattach.eml).

1.46 [Release 26 Mar 2002]

Piece	Type	Change
JM	FIX	%TESTSFAILED% will now return "None" if no tests failed.
JM	FIX	Will no longer run ip4r tests on private IP ranges.
ALL	FIX	Log files will now show 17-character spool filename (IMail 7.06HF1+) rather than first 7 characters.
ALL	FIX	Enhancements made to file IO when adding headers and making other changes to Email.

1.45 [Beta 19 Mar 2002]

Piece	Type	Change
AV	FIX	Now supports most possible corrupt MIME segments, such as those used by some Gibe and FBound variants.

1.44 [Beta 12 Mar 2002]

Piece	Type	Change
JM	FIX	# of whitelist entries increased to 200; code added to prevent issues when max is reached.
CON	FIX	Now supports 17-character filenames (from IMail 7.06HF1).

1.43 [Release 12 Mar 2002]

Piece	Type	Change
AV	FIX	Takes care of a problem where spaces in a MIME segment could cause scanner to see a corrupt attachment; fixed.
AV	FIX	Fixed an issue with 1.42 where files could not be moved between drives.

1.42 [released 07 Mar 2002]

Piece	Type	Change
JM	FIX	Fixed potential issue with "Copy all mail" that could cause subject to get altered.
JM	FIX	HEADER/FOOTER/SUBJECT can now use variables.
AV	FIX	Will now automatically replace an Email already in the VIRDIR directory (rather than letting a virus be delivered if duplicate spool file names occur).

1.41 (beta)

Piece	Type	Change
AV	FIX	An priority issue was discovered when multiple recipients of a virus had different settings; fixed.
ALL	ADD	%CR% variable to add a linefeed (IE for Declude JunkMail HEADER option).
AV	ADD	XSPOOLNAME and XSENDER options added

1.40 (beta)

Piece	Type	Change
AV	FIX	Will now treat Emails with the Microsoft Outlook "CR" Vulnerability as a virus.
AV	FIX	uuencoded files with bogus filenames might not have been scanned; fixed.
JM	FIX	Default X-RBL-Warning: header now includes the name of the test that failed.

1.39 (beta)

Piece	Type	Change
JM	FIX	In some cases WARN action data could be used with SUBJECT action; fixed.
AV	FIX	CLSID extension check now will only trigger if CLSID is in extension (not if it only appears in filename).
AV	FIX	Changes made for Lite version support.

1.38

Piece	Type	Change
JM	FIX	"fromfile" test could cause header corruption when used with WARN action; fixed.

1.37 (beta)

Piece	Type	Change
ALL	FIX	Changed "D" file renaming to realtime priority to prevent IMail from stealing the file.
AV	FIX	Fixes an issue where ONACCESS ON might not work properly.
JM	FIX	WARN action might not have worked properly with multiple recipients; fixed.
JM	FIX	Weighting for "external" test type wasn't working; fixed.
JM	FIX	Another change to get variables to work with the SUBJECT action.
JM	FIX	Warning message for "fromfile" test type might be corrupt; fixed.
JM	FIX	Domains in "fromfile" test type might not have worked correctly; fixed.

1.36 (release)

Piece	Type	Change
ALL	FIX	In some rare cases IMail could possibly re-use a D file Declude was using; fixed.
AV	FIX	With multiple scanners, if one was broken, the other couldn't be used; fixed.
AV	FIX	Some broken uuencoded segments that couldn't be scanned now can.
JM	FIX	A problem came up where the WARN action might not get used; fixed.
JM	FIX	Can now use variables with the HEADER/FOOTER actions.

1.35 (release)

Piece	Type	Change
AV	FIX	Change to prescanning code to verify that only HTML files are prescanned.
JM	FIX	Change to make sure that <> won't fail MAILFROM test.
JM	FIX	Can now use variables in subject action (IE "WEIGHT10 SUBJECT [WEIGHT=%WEIGHT%].
JM	ADD	%TESTSFAILED% variable (IE "BADHEADERS,MAILFROM").

1.34

Piece	Type	Change
AV	FIX	"Virus Found" will now take priority over a banned file extension.
CON	FIX	Will now work properly with domain aliases (IE imailsrv@example.com -> imailsrv@mail.example.com).
JM	FIX	%ALLRECIPS% will now be truncated if very long.

1.33

Piece	Type	Change
JM	FIX	%ALLRECIPS% in XINHEADER option could crash; fixed.
JM	FIX	Domains listed in "fromfile" test type now work as a partial match.
JM	FIX	Another tweak to prevent global.cfg from being used instead of $default$.JunkMail.
AV	FIX	Will now properly handle Emails with more than 100 MIME segments.

1.32

Piece	Type	Change
ALL	FIX	Now starts programs (smtp32.exe, scanners, etc.) with no window, which should eliminate Microsoft/IMail/Declude's 0xC0000142 problem.
ALL	FIX	Maximum address length Declude will display changed from 64 to 129.
JM	FIX	MAILFROM test wasn't counting towards weighting; fixed.
JM	FIX	global.cfg file still be used in some cases; fixed.
JM	FIX	BADHEADERS test will now be triggered if no To: or From: header.
JM	FIX	BADHEADERS test will now detect bogus "numbered" time zones.
JM	FIX	WHITELIST ANYWHERE now case insensitive.

1.31

Piece	Type	Change
JM	FIX	More changes to ensure global.cfg only used for outgoing mail.
JM	FIX	External programs now need to be formatted as 'TESTNAME external returnvalue "filename"'.
AV	FIX	Dual scanners wouldn't work properly; fixed.
AV	FIX	1.30 wouldn't work with non-standard spool directories without using TEMPDIR option; fixed.
AV	FIX	"ERROR 123 opening outfile" problem fixed.
AV	FIX	TNEF problem fixed (wouldn't work properly with files not using winmail.dat name).

1.30

Piece	Type	Change
JM	FIX	No longer fails BADHEADERS test with invalid "@localhost" in Message-ID:, to allow Email from Pegasus through.
JM	FIX	Could miss first character of username, fixed.
JM	FIX	Adds support for internal IPs shown by Interscans weird headers.
JM	FIX	Removed POPUP action to remove reliance on user32.dll (to minimize "C0000142" issues).
AV	FIX	Will now display the name of a file even if it is not in quotes.
AV	FIX	Will now display the name of a file even if it is only listed in Content-Disposition: header.
AV	FIX	Major overhaul to the MIME decoding routines.
ALL	FIX	Declude.exe now shrunk to about 1/2 original size.
ALL	FIX	Declude.exe dependency on user32.dll eliminated, which will help with IMail's "C000142" issue.
JM	ADD	%HEADERCODE% variable to display Declude's code for BADHEADERS/SPAMHEADERS tests.
AV	ADD	DELIVERERRORS ON config option to deliver Email when an error code is reported by scanned.
AV	ADD	TEMPDIR config option to let you choose directory that Declude scans files in.
AV	ADD	SLEEP config option to have Declude "sleep" for a certain number of seconds (so you can see decoded files).
AV	ADD	Will automatically detect F-Prot.PIF file and delete it, so it doesn't prevent mail from being scanned.
AV	ADD	PRO version: Support for multiple scanners using SCANFILE2, VIRUSCODE2, REPORT2, OKCODE2.

1.29

Piece	Type	Change
AV	FIX	ONLYSENDIFLOCALRECIPIENT wasn't working properly; fixed.
JM	FIX	WHITELIST would not work with MAILFROM test; fixed.
JM	FIX	SWITCHRECIP option wasn't working properly; fixed.
JM	FIX	Extra IP ranges added to SPAMROUTING test.
ALL	ADD	Can use relative paths for LOGFILE and VIRDIR config options.
AV	ADD	BANCLSID option to ban hiding file extensions with CLSIDs.
AV	ADD	FOOTER option to add a footer to scanned Email.
AV	ADD	DELETEVIRUSES option to allow deleting of viruses rather than quarantining them.
AV	ADD	If a BANnotify.eml file is present in \IMail\Declude, it will be sent when files with banned attachments are received.
AV	ADD	TNEF (Exchange "winmail.dat") support added.
AV	ADD	%BANEXT% variable added for BANnotify.eml (displays extension that was sent, IE "scr").
AV	ADD	OKCODE config option to allow Email through when a virus scanner reports a certain code (such as for hoaxes).

1.28

Piece	Type	Change
JM	ADD	Adds weighting system.
JM	ADD	SWITCHRECIP option; when set to ON will use intended recipient (alias@) rather than actual recipient (user@).
JM	FIX	Splits HEUR test into 10 levels (1: Very unlikely spam, to 10: Almost certainly spam).

1.27a

Piece	Type	Change
AV	ADD	ONLYSENDIFLOCALRECIPIENT and ONLYSENDIFREMOTERECIPIENT for .eml template files.
ALL	FIX	Sets desktop/workstation to "" not NULL for new processes to help prevent 'flashing' windows on screen.
ALL	FIX	Adds Declude Queue.

1.27

Piece	Type	Change
JM	FIX	Outgoing Email using FOOTER action might not work; fixed.
AV	FIX	Files that are BANned will now have their extension listed in the logs at LOGLEVEL HIGH.
AV	FIX	BANEXT will now no longer apply to BinHex files (since the extension can not be determined by examining the headers).
AV	ADD	PRESCAN configuration option added (for Declude Virus Pro), when set to ON will pre-scan HTML files (if no dangerous code is found, it won't be sent to the scanner, saving CPU time).

1.26

Piece	Type	Change
JM	FIX	Will now allow lines >1024 characters in headers.
JM	FIX	MAILFROM test warning message changed to be more understandable.
JM	FIX	DNS engine now has a failsafe to prevent possible infinite loops.
ALL	ADD	%HEADERS% variable to display headers of Email.
ALL	ADD	PID ON config option to display PID in debug log files.
ALL	ADD	PIDDEBUG ON config option to save debug logs to separate file for each Declude process.
AV	ADD	Files that Declude saves are now treated by Windows as temporary files, for improved performance.
AV	ADD	Adds IP address of remote sender to log file at MID or higher.
AV	ADD	Will now scan plainttext segments that have a file name, due to horribly buggy mail clients that could possibly allow future viruses to be run that way.
JM	ADD	PERCENT test added, to detect rare routing with a percent sign in Email addresses that IMail anti-relaying settings may not catch.

1.25a

Piece	Type	Change
AV	FIX	LOG_OK config option broke in 1.25; fixed.
AV	FIX	Better checking for spaces in SCANFILE config option.
JM	FIX	ALERT/BOUNCE might not work properly; fixed.
JM	FIX	Warning message in bounce/alert Emails could be from wrong test when multiple tests failed; fixed.
JM	FIX	Could produce extraneous characters ("iiiii") in headers with WARN action; fixed.
JM	FIX	Adds extra logging when MX record lookup fails (at LOGLEVEL HIGH).
AV	ADD	Adds %REMOTEIP% variable to return IP address of remote server.

1.25

Piece	Type	Change
ALL	FIX	A crash (unnoticeable) could occur in unusual circumstances; fixed.
AV	FIX	Adds a 'banned' message to the log when Emails are banned based on their extensions.
JM	FIX	Variables in BOUNCE/ALERT Emails could be set to wrong test; fixed.
JM	FIX	HEADER/FOOTER could occur multiple times; fixed.
JM	FIX	Will not fail MAILFROM test if server reports a failure.
AV	ADD	Will now report the error code that a scanner returns.

1.24

Piece	Type	Change
ALL	FIX	If SendName registry entry is not declude.exe or smtp32.exe, Declude won't try to set it back to declude.exe.
ALL	FIX	Gets rid of extraneous Declude.rsp file (from 1.23).
AV	FIX	Could send .eml files for Declude JunkMail or Declude Confirm; fixed.
AV	FIX	%LOCALHOST% will now use official host name for remote-to-remote Email (where neither sender nor recipient are local).
JM	FIX	Possible crash in bounce messages if they were over 32K; fixed.
JM	FIX	MAILFROM test could get triggered on a DNS timeout; fixed.
JM	FIX	Adds error checking to see if an Email can't be moved to the hold directory.
JM	FIX	HEADER action can now be up to 1,000 bytes long.
JM	FIX	All DUL tests (any with DUL in the name, such as OSDUL) will bypass first hop.
CON	FIX	Problem using listserv@ address; fixed.
AV	ADD	BANEXT config option to allow you to ban certain file extensions (which get quarantined, but no notifications get sent out). Usage: "BANEXT exe".
AV	ADD	Adding "ONLYSENDIFLOCALSENDER" or "ONLYSENDIFREMOTESENDER" on a line by itself in .eml files will force Declude to only send the notification if the sender is local/remote.
AVPRO	ADD	Per-domain and per-user scanning now available.
HI	ADD	ALLOWIP config option to allow certain IPs to send unlimited mail. Usage: "ALLOWIP 127.0.0.1".

1.23

Piece	Type	Change
AV	FIX	Will now send notifications to postmaster@%LOCALHOST% for the "Snow White" virus.
AV	FIX	Will verify there are no spaces in SCANFILE option.
JM	FIX	Better support for failed DNS queries.
JM	FIX	Improved DNS lookups (most now done in parallel, reducing delivery delays).
JM	FIX	Now supports domains greater than 64 bytes in length.
JM	FIX	Will better handle REVDNS test if there is a timeout.
HI	FIX	Now accepts listsrv@ as well as imailsrv@.
ALL	FIX	Will now timeout after 30 seconds of trying to lock a file.
DNS	FIX	Many improvements to the DNS engine.
JM	ADD	ACTION: BOUNCE (beta!) will return a 'bounce' message, and not deliver the spam.
JM	ADD	ACTION: ALERT (beta!) action will return a 'bounce'-like message, but will also deliver the spam.
JM	ADD	ACTION: POPUP. This will display a pop-up box. Likely of limited use (except with CATCHALLMAILS for important addresses?).
ALL	ADD	Diagnostic mode added. Typing "Declude -diag" from a command prompt will display diagnostic information.

1.22a

Piece	Type	Change
CON	FIX	Would not always record to log file at LOW setting; fixed.
CON	FIX	Could fail to work if subscribe message was > 8000 characters.
JM	FIX	If recipient file couldn't be opened after spam processing, processing could halt; fixed.

1.22

Piece	Type	Change
CON	ADD	Adds Declude Confirm.

1.21c

Piece	Type	Change
JM	FIX	Changes max. length of warning message to 255 characters.
JM	FIX	SPAMROUTING wouldn't work properly with several overseas IPs; fixed.
JM	FIX	WARN action with REVDNS will now display a message in the header.
JM	FIX	Reverse DNS lookup will return "(Private IP)" for private IP addresses.
JM	FIX	Now treats 0.0.0.0 as a private IP.
JM	FIX	SPAMROUTING will now handle private IPs not marked as such.

1.21b

Piece	Type	Change
JM	FIX	TEST TYPE: revdnsexists broke in 1.21a; fixed.

1.21a

Piece	Type	Change
JM	FIX	ACTION: WARN action could be missing CRLF; fixed.

1.21

Piece	Type	Change
JM	FIX	Could cut off first character of "To:" address in log files for digest messages; fixed.
JM	FIX	ACTION: WARN action can now take a string (IE "RBL WARN X-RBL-Warning: %WARNING%").
JM	FIX	CONFIG: Changed WHITELIST option so it can accept spaces.
JM	ADD	ACTION: BEEP action added. "RBL BEEP 1000 100" (MHz/ms)
JM	ADD	TEST TYPE: "rhsbl", to do DNS-based lookups on MAIL FROM host name, rather than IP address. IE dsn.rfc-ignorant.com.
JM	ADD	TEST TYPE: "revdnsexists" to make sure a reverse DNS entry exists for the remote servers' IP address.
JM	ADD	VARIABLE: %WARNING% to return warning message (from the TXT record in DNS lookups).
JM	ADD	VARIABLE: %TESTNAME% to return the name of the test ("RBL").
JM	ADD	VARIABLE: %TESTDOMAIN% to return the domain used by DNS tests ("inputs.orbs.org").
JM	ADD	VARIABLE: %REVIP% to return the IP address of the remote DNS server.
JM	ADD	VARIABLE: %REVDNS% to return the reverse DNS entry for the mail server's IP address.

1.20 [Public Release]

Piece	Type	Change
AV	FIX	Some people had problem with a deccon.exe error; fixed.
JM	FIX	WHITELIST sometimes wouldn't work properly; fixed.

1.19

Piece	Type	Change
JM	FIX	A buffer overrun could occur in certain cases with many recipients; fixed.
AV	FIX	%ALLRECIPS% now will have a space after commas for multiple recipients.
AV	FIX	%LOCALHOST% could return a remote domain in certain circumstances; fixed.
AV	FIX	Skipping files (.GIF, etc.) could leave .vir directories behind if plain text segments occurred afterwards; fixed.
AV	FIX	Invalid .eml template files (such as no From:) would cause Declude to stop processing at that point; fixed.
AV/JM	ADD	If Declude's registry hook gets changed, running declude.exe manually will fix it.
AV	ADD	ONACCESS config option. Should be set to ONACCESS OFF unless you use an on-access scanner with Declude. Will prevent issues with incorrect REPORT config option.
AV	ADD	SCANNERTIMEOUT config option, to set the number of seconds Declude will wait for a scanner to end. Will minimize impact of F-Prot .PIF "never end" bug.
JM	ADD	WHITELIST config option (IP/FROM/ANYWHERE). Lets you whitelist an IP/MAILFROM or body text, to prevent Email from getting caught. IE "WHITELIST IP 192.168.10.2"

1.18

Piece	Type	Change
JM	FIX	DNS engine change to prevent problem with some Emails not being scanned if MAILFROM test was used.
JM	ADD	Support added for external third party programs to be used to enhance Declude.
AV	ADD	Will now skip over duplicate mailing list messages.

1.17

Piece	Type	Change
AV	FIX	Quoted file names in uuencoded sections would get caught as viruses; fixed.

1.16d

Piece	Type	Change
AV	FIX	v1.16c could report false positives; fixed.
AV	ADD	%VERSION% variable added.

1.16c

Piece	Type	Change
AV	FIX	Will now delete all .SM# files from spool directory, even if Email was not sent.
AV	FIX	%VIRUSNAME% should now work properly.

1.16b

Piece	Type	Change
AV	FIX	%VIRUSNAME% and %VIRUSFILE% return "Unknown" when name/file can't be determined.
AV	FIX	Will no longer send Email from "postmaster@Unknown" for Snow White virus.
AV	FIX	Will now allow blank lines anywhere in .eml template files.
AV	ADD	When using REPORT cfg option, will record virus file and name to log.
JM	FIX	Would consider mail server versions (such as 5.5.1024.3) an IP address in rare situations; fixed.

1.16

Piece	Type	Change
AV	FIX	%LOCALHOST% could return hostname of remote sender instead of local domain if a domain alias was used; fixed.
AV	FIX	Email notifications could have several extra blank lines at top; fixed.
JM	FIX	Could tag incoming Emails as outgoing (remote) if a domain alias was used; fixed.

1.15

Piece	Type	Change
AV	FIX	Will now wait 10 minutes (instead of 60) for imail1.exe to send Email notifications.
AV	FIX	Domains with a "-" in them will now have Email notifications sent properly by imail1.exe.
AV	FIX	%ALLRECIPS% will now show the intended recipients, rather than the final recipients (IE when using aliases).
AV	FIX	%VIRUSFILE% will now work with McAfee .ZIP file scanning.
AV	FIX	Will no longer send notifications to "<>" .
AV	FIX	imail1.exe would add a space to some domain names; fixed.
AV	ADD	Will now pop up the imail1.exe window if any problems occur sending notifications.
AV	ADD	%SENDERHOST% and %RECIPHOST% variables added to return the host of the sender and recipient.
JM	FIX	Could add multiple Subject: headers; fixed.
JM	FIX	Re-working of DNS server name resolution; people using the "DNS" config option should now be able to take it out.
JM	ADD	BADHEADERS test detects headers that are frequent in spam, and should never occur in legitimate Email.
JM	ADD	SPAMHEADER test detects headers that are frequent in spam, and rarely occur in legitimate Email.
JM	ADD	SPAMROUTING test detects poor routing common to spam, but rare in legitimate mail.
JM	ADD	CATCHALLMAILS test that will mark ALL mail as spam. This is NOT a spam test.

1.14

Piece	Type	Change
AV	FIX	Will now handle the MIME x-uuencoded file type as well as standard uuencoded attachments.
AV	FIX	Will now scan "\IMail\spool\dir\" rather than "\IMail\spool\dir\.", since a couple virus scanners choked on ".".
AV	FIX	Will default internally to MIME type text/plain per RFC1521.
AV	FIX	Handling of MIME type "quoted-printable" could be flawed; fixed.
AV	ADD	Will now handle BinHex Mac encoded attachments.
AV	ADD	MID logging level will now show attachment file names.

1.13

Piece	Type	Change
AV	FIX	%LOCALHOST% will now use recipient's domain name, rather than the IMail Host Name (which could be incorrect)
AV	FIX	%LOCALHOST% and %REMOTEHOST% will now work correctly (before, they could be switched for outgoing Email)
AV	ADD	Config options INCOMING ON/OFF and OUTGOING ON/OFF to turn on/off scanning of incoming/outgoing Emails
AV	ADD	MID logging level will now record from/to/subject
AV	ADD	Notifications: Will not send Email to NULL domains (based on incoming mail from "<>")
JM	FIX	Will prevent extra copies of header warnings from being added
JM	ADD	Config option IPBYPASS that will bypass an IP address (for example, your backup mail server) and start scanning at the next hop.
JM	ADD	DUL test will now only be used on the first hop
JM	ADD	Config option XSENDER that will always add a header in the format "X-Declude-Sender: MAILFROM [IP]"
JM	ADD	Config option XSPOOLNAME that will always add a header in the format "X-Declude-Spoolname: Q1234567.SMD"
JM	ADD	Config options RELAYTHRESHOLD1 and RELAYTHRESHOLD2 for later use (Hijack detection in Pro version)
JM	ADD	Config options XINHEADER and XOUTHEADER to always add a header on incoming/outgoing Email (can use variables)
BOTH	FIX	There was a possibility of a crash if incoming Email was addressed without a domain; fixed.
BOTH	ADD	Enhanced debugging information will be recorded in the event of a crash.

1.12

Piece	Type	Change
AV	FIX	You can now use lines beginning with "To:" "From:" or "Subject:" in Email template files.
AV	FIX	%REMOTEHOST% variable will now use "Unknown" for NULL senders ("<>"), instead of "localhost".
AV	FIX	Will no longer try sending Email to sender when the sender is a NULL sender("<>").
AV	FIX	Will make sure that temporary body file for Email notifications gets deleted from spool directory.
AV	ADD	Added %QUEUENAME% variable, which returns the queue file name (IE Q1234567.SMD).
AV/JM	ADD	Added CONSOLE ON/OFF configuration option for future use.
JM	ADD	Added HOPHIGH configuration option to specify a range of hops to scan. Declude will now scan from hop HOP to hop HOPHIGH.
AV	ADD	Will now try up to 5 times to re-scan files if the scanner reports an error (should help users with McAfee choking on too many scans).

1.11b

Piece	Type	Change
AV/JM	FIX	Problems processing .LST files; fixed.
DNS	FIX	Will properly distinguish between DNS server IPs and domain names.
AV	FIX	%DATE% used // as delimiter; changed to /.
AV	FIX	Some Email addresses in variables would have a trailing '>'; fixed.
AV	ADD	Will now use "<>" for blank senders instead of "".
AV	ADD	%SUBJECT% variable; returns the subject of the Email.
AV	ADD	%MSGID% variable; returns the Message-ID of the Email.

1.11

Piece	Type	Change
AV	FIX	Will now work with Email clients that use non-quoted boundaries (such as Pegasus).
AV	ADD	Email notifications.
AV	ADD	Will kill AV processes that stay around for 1 hour.
AV	ADD	Will scan multiple attachments at the same time, rather than separately, minimizing the number of AV processes started.
AV/JM	ADD	If you use #### in the log file name, it will be replaced with the date. For example, "LOGFILE C:\IMail\spool\dec####.log" will create dec0101.log on January 1st.

[Legend: AV=Declude EVA; JM=Declude JunkMail; DNS=DNS Engine FIX=Bug fix or change to an existing feauture; ADD=New feature CFG=Default Config File Change]

To be removed from our mailing list please click here