>I have a firebox also and I have figured out a way to stop it using the >smtp proxy. If you care to email directly, I will be more than happy to >share what I've done, although this is specific to the new my party >virus. My firebox has never had any other problems catching previous >.com viruses.
it's the "triple-extension" www.myparty.yahoo7.com format that fools most string-matching routines. We already had to add string-matching for "double extension" a couple of months ago, nimda I think. We catch myparty in IMGate with headerchecks. but kaspersky, in IMGateAV, seems to have been updated for myparty before some of the name brands. Len http://MenAndMice.com/DNS-training http://BIND8NT.MEIway.com : ISC BIND 8.2.4 for NT4 & W2K http://IMGate.MEIway.com : Build free, hi-perf, anti-abuse mail gateways Please visit http://www.ipswitch.com/support/mailing-lists.html to be removed from this list. An Archive of this list is available at: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
