Trend used to have some problems with the interscan viruswall engine.....
specifically a file called ISSMTPD.EXE. there has been a couple of releases
for this file to keep it up to date with the way that some polymorphic and
stealth viruses act and change.
You should be able to get update for their products from
ftp.trendmicro.co.uk <ftp://ftp.trendmicro.co.uk>
Or try www.sd.co.za/ftp/ <http://www.sd.co.za/ftp/>
mika
-----Original Message-----
From: Elmar van Mourik [SMTP:[EMAIL PROTECTED]]
Sent: 12 December 2001 12:27
To: [EMAIL PROTECTED]
Subject: [FW-1] Virus not detected by Trend VirusWall
Hi all!
I'm running FW-1 4.1 with Trend Viruswall CVP.
Sometimes the CVP scanner does not recognize a virus in an
attachement or
does not block on the extension.
Has anyone had this problem before or knows the solution?
Mail headers from the two emails in the spool directory on the Nokia
are:
AV_SETTING: cure
AV_IPADDR: 192.168.75.10
AV_PORT: 18181
AV_HEADERS: 0
COMPOUND: 0
SRC: 194.159.73.251
SPORT: 45482
DST: 195.11.244.3
DPORT: 25
ERR_SERVER: 195.11.244.3
RULE: 37
RULEACT: 0
ERRMAIL: 0
ACCT: 0
LOG_OK: MDQ_LOG
LOG_BAD: MDQ_LOG
LOG_ERR: MDQ_ALERT
AV_SETTING: cure
AV_IPADDR: 192.168.75.10
AV_PORT: 18181
AV_HEADERS: 0
COMPOUND: 1
SRC: 194.159.73.251
SPORT: 33524
DST: 195.11.244.3
DPORT: 25
ERR_SERVER: 195.11.244.3
RULE: 37
RULEACT: 0
ERRMAIL: 0
ACCT: 0
LOG_OK: MDQ_LOG
LOG_BAD: MDQ_LOG
LOG_ERR: MDQ_ALERT
Elmar van Mourik
Systeem en Netwerkbeheerder ZHEW
Tel: +31 78 6397 289
Fax: +31 78 6139 212
------------------------------
Door de electronische verzending van het bericht kunnen er geen
rechten
ontleend worden aan de informatie. Als u deze e-mail onterecht heeft
ontvangen, waarschuwt u dan de afzender via [EMAIL PROTECTED] en
verwijder
de gegevens van de computer.
Zuiveringsschap Hollandse Eilanden en Waarden, Dordrecht
tel: +31 (0)78 6397100
fax: +31 (0)78 6311871
web: http://www.zhew.nl
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
To set vacation, Out Of Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
If you have any questions on how to change your
subscription options, email Ron Alcatraz at:
[EMAIL PROTECTED]
=================================================
**********************************************************************
This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom they
are addressed. If you have received this email in error please notify
the system manager.
This footnote also confirms that this email message has been swept by
MIMEsweeper for the presence of computer viruses.
www.mimesweeper.com
**********************************************************************
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
To set vacation, Out Of Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
If you have any questions on how to change your
subscription options, email Ron Alcatraz at:
[EMAIL PROTECTED]
=================================================