> We use the declude anti-virus system but I can't find 
> instructions on how to do as you suggested in the config 
> file.  Could you point me in the right direction on where to 
> find the information on turning off the notifications message 
> as well as how to not send if the viruses are containing the 
> list below.

Barbara,

1.) put the following lines at the end of your virus.cfg file

FORGINGVIRUS    Magistr
FORGINGVIRUS    Klez
FORGINGVIRUS    Yaha
FORGINGVIRUS    Lentin
FORGINGVIRUS    Bridex
FORGINGVIRUS    Bugbear
FORGINGVIRUS    SoBig
FORGINGVIRUS    Fizzer
FORGINGVIRUS    Palyh
FORGINGVIRUS    MiMail

This will replace the senders email-address by the string "forged" if
one of this virus-names are detected. So you can send an alert to the
recipient without indicating a false sender address.


2.) Add also the following lines in the front of your .eml-files (Note:
There should no empty lines until the subject line)

SKIPIFVIRUSNAMEHAS Magistr
SKIPIFVIRUSNAMEHAS Klez
SKIPIFVIRUSNAMEHAS Yaha
SKIPIFVIRUSNAMEHAS Lentin
SKIPIFVIRUSNAMEHAS Bridex
SKIPIFVIRUSNAMEHAS Bugbear
SKIPIFVIRUSNAMEHAS SoBig
SKIPIFVIRUSNAMEHAS Fizzer
SKIPIFVIRUSNAMEHAS Palyh
SKIPIFVIRUSNAMEHAS Braid
SKIPIFVIRUSNAMEHAS MiMail

I've done this in our .eml-files that will be send to the mailfrom
email-address usually named sender.eml
This will prevent the delivery of virus alerts to forged sender
addresses, and so creating false alarms on this side.

The recipient (our customer) still recieves the alert (recip.eml) and is
happy because our AV-solution has successfully protected his mailbox and
his computer.

On "rush days" like this simply add temporaly

SKIPIFVIRUSNAMEHAS SoBig

to the recip.eml to prevent that your users/customers are swamped with
virus alerts.

Markus


To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/

Reply via email to