Remember this link is included in the recipients email. http://serverwithvirus.com:port/declude.asp?msgid=%QUEUENAME%
We use Port 81. We also remove almost all access to IIS and use IIS lockdown to tighten all the way down. The way that we do this is we include the link to the infected file in the alert email. You want the Virus here it is. We explain how dangerous it is to request such a file but if the client determines that the message is urgent they have the opportunity to click once and be done. No going to other pages and pasting anything. Obviously there is the danger involved but these are grown people and the danger is to themselves. The script works as I posted. If you know Javascript you can modify it. Being used for well over a year by the original author and I have used it for months with never an issue. The obvious issue is allowing people to access infected files. That is your call whether they paste into another page and you keep track of their name or they simply click a link and get the virus sent to them. The problems can occur on their end in both cases. -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Goran Jovanovic Sent: Friday, May 28, 2004 1:06 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.Virus] Notification for forwarded messages Doug How do you deal with IIS and IMail web servers both running on the same box and both wanting port 80? I have broken up iissocketpooling in the past but it requires 2 IP addresses to work. Is that what you have done or are you running one on a non standard port? Thanx -----Original Message----- From: "Douglas Cohn" <[EMAIL PROTECTED]> Date: Fri, 28 May 2004 12:28:22 To:<[EMAIL PROTECTED]> Subject: RE: [Declude.Virus] Notification for forwarded messages We do this as well using Vbscript only. It does exactly what you do. Anytime a virus is quarantined an email with a link to the file is sent to the recepient with a warning of the dangers involved in retrieving the files. We then delete everything over 5 days old to avoid getting too many files in the virus dir. We also require IIS to be running. It was written by an ISP that uses it on his shared IMAIL server. He deletes them in 2 days. ===================== You add this to the recip.eml ===================== If you would like a copy of the infected email please follow the link below AT YOUR OWN RISK!!! http://serverwithvirus.com:port/declude.asp?msgid=%QUEUENAME% REMEMBER IT IS AN INFECTED EMAIL. The email will be deleted in 5 days. ================ The declude.asp file ================ <[EMAIL PROTECTED]> <% var virusdir="c:\\imail\\spool\\virus\\"; var spooldir="c:\\imail\\spool\\"; var file=""+Request.QueryString("msgid"); file=file.substr(1); fso = new ActiveXObject ("Scripting.FileSystemObject"); if (fso.FileExists(virusdir+"D"+file)) { fso.MoveFile(virusdir+"D"+file, spooldir+"D"+file); fso.MoveFile(virusdir+"Q"+file, spooldir+"Q"+file); Response.Write("Please check your e-mail in a few minutes for the virus infected message you requested."); } %> ================ Very simple as well. Doug -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Rick Davidson Sent: Friday, May 28, 2004 11:01 AM To: [EMAIL PROTECTED] Subject: Re: [Declude.Virus] Notification for forwarded messages I have written a simple app using ASP and PERL that will move the quarantined file from the virus directory back to the spool for delivery. It requires IIS to run on the same box as Imail, I run gateway servers so it is a bit easier for me. I include the spool name and a link to the gateway server that held the file in the BanNotify message, the user copies the file name and pastes it to text box on the ASP page, clicking submit sends it to the PERL script which moves the file back to the spool. I then intercept all notifications for banned files that I dont want them retreiving such as mpegs and mp3s Works great I dont mind sharing the code if anyone wants it Rick Davidson National Systems Manager North American Title Group - ----- Original Message ----- From: "Hermann Strassner" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Friday, May 28, 2004 6:39 AM Subject: [Declude.Virus] Notification for forwarded messages Hello! We block ZIPs and some executable extensions and want to leave it this way. Because some folks need to send them, we have to check the quarantined files (for viruses) and forward the mails without viruses manually. Is there a way to inform the user that his mail is now forwarded? Alternatively, is it possible for the user to answer to the automatic generated mail and forward the mail by himself? Is it possible somehow? I think of it as follows: User sends email with ZIP, gets a notification, answers to the notification with YES or something like that, Declude sees it and forwards this email. I think this is enough to make sure the user sends the email intentionally. Hermann --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus] Goran Jovanovic The LAN Shoppe O: (416) 440-1167 x-2113 C: (416) 931-0688 E: [EMAIL PROTECTED] Sent from my Wireless Blackberry --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com.