I concur.
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On Behalf Of Douglas Cohn
> Sent: Saturday, April 16, 2005 9:06 AM
> To: Declude.Virus@declude.com
> Subject: RE: [Declude.Virus] Skipifforging not working on Mytob
>
>
> The only other difference is that I'm using SmarterMail.
>
> That cause your Smarter. The difference between SmarterMail
> and Imail is just unreal. It is like the difference between
> breathing and having a plastic bag over your head. Imail
> always sucked but I lived with it because I owned a copy from
> a previous business venture and Declude worked great. I
> cannot imagine what anyone else's excuse is but I am
> sure they exist and are valid as well.
>
> But Smartermail is so much faster, smoother nicer need I say
> more. It also does not choke on every little thing that
> pounds the server.
>
> Dump Imail and be glad you did.
>
> Just my 1 cent.
>
> DC
>
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On Behalf Of Shayne Embry
> Sent: Friday, April 15, 2005 12:53 PM
> To: Declude.Virus@declude.com
> Subject: RE: [Declude.Virus] Skipifforging not working on Mytob
>
> I have also been experiencing this, for over a week. I'm only
> using F-Prot, but have added the appropriate lines to eml and
> virus.cfg files as John has. The only other difference is
> that I'm using SmarterMail.
>
> Shayne
>
>
> > -Original Message-
> > From: [EMAIL PROTECTED]
> > [mailto:[EMAIL PROTECTED] On Behalf Of John Carter
> > Sent: Friday, April 15, 2005 10:48 AM
> > To: Declude.Virus@declude.com
> > Subject: [Declude.Virus] Skipifforging not working on Mytob
> >
> >
> > Shortly after adding ClamAV to the Imail Server a few days ago, my
> > system started sending virus notices on Mytob (and so far,
> only Mytob)
> > even though I have SKIPIFFORGING in the sender.eml, recip.eml and
> > postmaster.eml, plus I have Mytob in the list of forging viruses in
> > the virus.cfg. In the virus log lines below, scanner 1 is
> F-Prot and
> > scanner 2 is ClamAV.
> > The timing to the addition to ClamAV may be only a coincidence.
> >
> > Any ideas about what's happening?
> >
> > Thanks,
> > John
> >
> > Notice lines:
> > ==
> > Declude Virus 2.0.5 caught a incoming virus
> >
> > Subject: hello
> >From: [Forged]
> > To: [EMAIL PROTECTED]
> > Msg ID: <[EMAIL PROTECTED]>
> > Queue#: D74590703010e25a9.SMD
> > Remote IP: 63.197.109.187
> > Virus Name/File: W32/[EMAIL PROTECTED] data.zip
> >
> > postmaster.eml
> > ==
> > SKIPIFFORGING
> > From: [EMAIL PROTECTED]
> > To: [EMAIL PROTECTED]
> > Subject: E-mail virus notice
> >
> > Declude Virus %VERSION% caught a %INOROUT% virus
> >
> > Subject: %SUBJECT%
> >From: %MAILFROM%
> > To: %ALLRECIPS%
> > Msg ID: %MSGID%
> > Queue#: %QUEUENAME%
> > Remote IP: %REMOTEIP%
> > Virus Name/File: %VIRUSNAME% %VIRUSFILE%
> >
> > Headers:
> > %HEADERS%
> >
> > Virus log lines:
> >
> > 04/15/2005 02:59:36 Q74590703010e25a9 Banning .ZIP file with exe
> > extension. 04/15/2005 02:59:36 Q74590703010e25a9 Scanner
> > 1: Virus=W32/[EMAIL PROTECTED] Attachment=data.zip [36] I
> > 04/15/2005 02:59:37 Q74590703010e25a9 Scanner 2: Virus=
> > Worm.Mytob.T-2 Attachment=data.zip [36] I 04/15/2005 02:59:37
> > Q74590703010e25a9 File(s) are INFECTED [W32/[EMAIL PROTECTED]: 1]
> > 04/15/2005 02:59:37 Q74590703010e25a9 Deleting file with virus
> > 04/15/2005 02:59:37 Q74590703010e25a9 Deleting E-mail with virus!
> > 04/15/2005 02:59:37 Q74590703010e25a9 Scanned:
> > CONTAINS A VIRUS [MIME: 2 58859] 04/15/2005 02:59:37
> > Q74590703010e25a9 From: [Forged] To: [EMAIL PROTECTED] [incoming
> > from 63.197.109.187] 04/15/2005 02:59:37
> > Q74590703010e25a9 Subject: hello
> >
> > ---
> > This E-mail came from the Declude.Virus mailing list. To
> unsubscribe,
> > just send an E-mail to [EMAIL PROTECTED], and
> > type "unsubscribe Declude.Virus".The archives can be found
> > at http://www.mail-archive.com.
> >
>
> ---
> This E-mail came from the Declude.Virus mailing list. To
> unsubscribe, just
> send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.Virus".The archives can be found
> at http://www.mail-archive.com.
> ---
> [This E-mail scanned for viruses by Declude Virus]
>
>
>
> ---
> [This E-mail scanned for viruses by Declude Virus]
>
> ---
> This E-mail came from the Declude.Virus mailing list. To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.Virus".The archives can be found
> at http://www.mail-archive.com.
>
---
This E-mail came from the Declude.Virus mailing list. To
unsubscrib