[Declude.Virus] Notification question
scott if a notification need to go to %allrecep% and allrecep has many adresses both local and remote, what happens if we use onlysendiflocalrecep? 1-notification is sent only to local recep. 2-notification is sent to all recep or 3- no notification is sent --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
[Declude.Virus] multiple recipients Bugbear.B
Hi Virus-fighters :-) Before I will contact IPSwitch I would ask other declude virus users if they can confirm this possible issue: In the past 3 days I've seen multiple hold messages infected with W32/[EMAIL PROTECTED] and having a long, coma-separated list of recipient email addresses. At least on of this addresses is local but most of them are email addresses on other servers. A warning message for every single recipient is send out, but I've seen that most of the recieving smtp servers will interrupt the delivery after recieving the smtp-sender address: This address is indicated like "[EMAIL PROTECTED]>" No "<" in front but a ">" at the end. Scott says this must be an issue with imail1.exe Our eml-files has "[EMAIL PROTECTED]" without any < or > in the from-line. Anyone else can confirm this behavior? Markus --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] FW: WARNING: YOU MAY HAVE A VIRUS
1. If the message gets through because it is a corrupt version and non-viable, it will be delivered to the recipient, so no notification is sent. 2. If the virus scanner catches it but is not sure, it should report virus name Unknown. You can then add SKIPIFVIRUSNAMEHAS unknown in the appropriate .eml files. 3. If the message does not get picked up as infected, but has an banned attachment, it should be caught by that banned attachment. 4. You can also set up filter tests in JM to catch notifications/bounces from other servers. John Tolmachoff MCSE CSSA Engineer/Consultant eServices For You www.eservicesforyou.com > -Original Message- > From: [EMAIL PROTECTED] [mailto:Declude.Virus- > [EMAIL PROTECTED] On Behalf Of paul > Sent: Tuesday, September 02, 2003 12:55 PM > To: [EMAIL PROTECTED] > Subject: Re: [Declude.Virus] FW: WARNING: YOU MAY HAVE A VIRUS > > John, Scott, everyone. > > Question to this. > > I have the SKIPIF lines in my eml files, but I was curious, what happens > to the corrupt versions of Sobig, etc that the attachments get through due > to no virus? Since these return addresses are no doubt bogus, is there a > guard against this? Do we have a SKIPIFATTACHMENTIS .scr option? > > Paul > > > --- > [This E-mail scanned for viruses by Declude Virus] > > --- > [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] > > --- > This E-mail came from the Declude.Virus mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.Virus".The archives can be found > at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
Re: [Declude.Virus] FW: WARNING: YOU MAY HAVE A VIRUS
I have the SKIPIF lines in my eml files, but I was curious, what happens to the corrupt versions of Sobig, etc that the attachments get through due to no virus? Since these return addresses are no doubt bogus, is there a guard against this? Do we have a SKIPIFATTACHMENTIS .scr option? No, there is no way to do that. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you have been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
Re: [Declude.Virus] FW: WARNING: YOU MAY HAVE A VIRUS
John, Scott, everyone. Question to this. I have the SKIPIF lines in my eml files, but I was curious, what happens to the corrupt versions of Sobig, etc that the attachments get through due to no virus? Since these return addresses are no doubt bogus, is there a guard against this? Do we have a SKIPIFATTACHMENTIS .scr option? Paul --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
[Declude.Virus] loganalyzer
Anyone here having anything like the domlist.exe for the virus log I would like to create som stats for who is sending virus and to whom its coming Benny --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
