In addition, I am blocking all of the file types the virus uses? Weird!

-----Original Message-----
From: Welch, Tom 
Sent: Wednesday, June 09, 2004 10:15 AM
To: [EMAIL PROTECTED]
Subject: RE: [IMail Forum] List serve question
Importance: Low


Shouldn't the IMail AV scanner have caught the virus when it was firat sent to the 
list?

-----Original Message-----
From: R. Scott Perry [mailto:[EMAIL PROTECTED]
Sent: Wednesday, June 09, 2004 9:51 AM
To: [EMAIL PROTECTED]
Subject: Re: [IMail Forum] List serve question
Importance: Low



>I have a moderated list. The owner is [EMAIL PROTECTED] Only the 
>moderator/owner can post. How does IMail perform this check? Does it just 
>look at the From field and see if it matches? The reason I am asking is 
>that it seems a message with a virus was posted to the list. The 
>moderator's machine is clean. I am wondering if the From filed mhgt have 
>been spoofed to the moderator's address and the message was sent? Is this 
>possible. If so, I better make sure she password protects the list.

It checks the "From:" header (and possibly other headers or the SMTP 
envelope?).  We've seen this happen, too, where the spammer has a header 
"From: Admin" and the E-mail gets to the list (presumably "admin" is 
treated the same as "administrator" and "root", and automatically has 
clearance to post to the list).

                                                    -Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers 
since 2000.
Declude Virus: Ultra reliable virus detection and the leader in mailserver 
vulnerability detection.
Find out what you've been missing: Ask for a free 30-day evaluation.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]


To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/

To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/

To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/

Reply via email to