Use the following in the .eml templates: SKIPIFVIRUSNAMEHAS Sobig
Or have this in the virus.cfg; FORGINGVIRUS Sobig and then have the following in the .eml templates: SKIPIFVIRUSNAMEHAS forged John Tolmachoff MCSE, CSSA IT Manager, Network Engineer RelianceSoft, Inc. Fullerton, CA 92835 www.reliancesoft.com > -----Original Message----- > From: [EMAIL PROTECTED] [mailto:Declude.Virus- > [EMAIL PROTECTED]] On Behalf Of Jeff Maze - Hostmaster > Sent: Wednesday, February 05, 2003 12:47 PM > To: [EMAIL PROTECTED] > Subject: [Declude.Virus] [EMAIL PROTECTED] & [EMAIL PROTECTED] > > Hello, > It appears as though the Sobig virus is making it's rounds again. > I've gotten three or four Undeliverable mails today. > Anyway, I remember reading somewhere in this list (when the virus > first hit) that there was a way for Declude to block these message before > the server even tried to send them out. I've looked again, but am unable to > locate the messages. > Can someone give me the lo-down on how to block these. Thanks.. > > > --- > [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] > > --- > This E-mail came from the Declude.Virus mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.Virus". The archives can be found > at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com.
