RE: [Declude.JunkMail] EXE files, again!
Anyone have good links? From http://www.sophos.com/virusinfo/whitepapers/prevention.html Block receiving/sending of executable code There is very little need for executable code to be received or sent. In most instances it is also illegal, usually breaching the software copyright. Some people are fond of using self-extracting ZIP files to send compressed data files: for security reasons using statically compressed ZIPs (which need PKUNZIP to be decompressed) is a much better solution. The blocking of executable code transfer is often best achieved on the internet gateway. Unfortunately, it is impossible to detect executable code with 100% certainty by analysing either the file content or the file extension. However, blocking files with executable extensions such as EXE, VBS, SHS etc. contributes to overall anti-virus measures. User education also plays a significant part in preventing infections by executable code received by email: the temptation to install a cute screensaver can be very, very high for a PC user who is not security aware. From http://www.sophos.com/virusinfo/articles/safehex.html Block any unwanted file types at the email gateway. Viruses often use file types such as VBS, SHS, EXE, SCR, CHM and BAT to spread. It is unlikely that your organisation will ever need to receive files of these types from the outside. If this is the case Sophos recommends blocking all of them at the email gateway - whether they are virus infected or not. HTH -B --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Panda email caught.
Why would Panda be sending an e-mail from what appears to be a dial up account in Spain that is listed as a known spam source? Their HQ is in Spain, although I doubt they're using a dial-up account. -B --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: Re: [Declude.JunkMail] Adultery
My challenge is that the stuff I'm seeing is stuff that my local users are sharing among themselves, so I'm going to need to develop something a little more stern than standard spam filtering. If you're a private company, which it appears that you are, how about starting with an Acceptable Use Policy? Then if that doesn't work get the backing from HR/upper management and let the abusers know that you're watching their e-mail and if they don't cease and desist they will be dismissed (hey look, I'm Johnny Cochran). Bill --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Adultery
I am using it here. John, How effective is it for you? Bill --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] question for all...
Has anybody done this? I just set this up this week for another organization on-site here. I used to host their e-mail on my IMail server but they are moving to a new location (none too soon I might add) and want to use Exchange. So currently their mail comes to my IMail server running Declude AV and JunkMail which then forwards it to their Exchange box. No problems to report. As far as the licenses go, my thinking is that if you're only spooling mail and not hosting any user boxes, you should be able to get by with the mininum user license. -B --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] OT: Spammed by my own state (HTML format)
Title: I'm here to help! Please forgive me for sending this but I just had to. I received this via my personal e-mail address which gets forwarded to my work address. Not only do my taxes pay for thebad TV commercials this guy has been subjecting me to, they are now funding spam. Ugh... Bill -Original Message-From: Bill Beach [mailto:[EMAIL PROTECTED]]Sent: Thursday, August 29, 2002 12:53 PMTo: Gib ArmstrongSubject: RE: I'm here to help! As my state rep., please do something about all of the spam I get. You can start by not sending me any. -Original Message-From: Gib Armstrong [mailto:[EMAIL PROTECTED]]Sent: Thursday, August 29, 2002 9:01 AMTo:[EMAIL PROTECTED]Subject: I'm here to help!Importance: Low Dealing with state government can be difficult at times, but it doesn't have to be. As your state Representative, I'm here to help! Whether it's questions about programs or you just need help cutting through the red tape to resolve a problem, please let me know what I can do for you. Here are just a few ways I can help: Tell a Friend Email : Email : Email : Getting a Copy of a Birth Certificate Assistance With College Loans Renewing Car Registrations Notary Services PACE Assistance And More Please contact me at my district office or visit my Web site at www.repgibarmstrong.com if there's something I can do for you. Thanks,Gib State RepresentativeGibson C. Armstrong 680 Robert Fulton Highway Quarryville, PA 17566 (717) 786-4551 Phone: (717) 786-3645 www.repgibarmstrong.com Security and Privacy Remove Me
RE: [Declude.JunkMail] Archive?
Is there an archive of the JunkMail and Virus lists? http://www.mail-archive.com/declude.virus%40declude.com/ http://www.mail-archive.com/declude.junkmail%40declude.com/ -b --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
RE: DSN:Re: [Declude.JunkMail] Bounce strategies?
That's because Outlook and/or Outlook Express don't have useable filters.
That's not entirely true. While Outlook doesn't have built-in filters to
look for X-RBL-Warning:, it can be configured to look in the headers for
this string and be filtered. I created a set of rules which I then exported
so when a user cries for help because of spam, I e-mail him/her the rules
file and then import them and activate them. Of course it does require
something to first put the string in the header--thank you Declude!
I played around with the filters.txt file that Outlook uses for its built-in
Junk and Adult Content e-mail detection and added {Headers contains
X-RBL-Warning:} but it didn't work--it apparently won't look into the
headers which is pretty sad.
Disclaimer: I work for a relatively small organization so it's quite easy
for me to bop around and set this up for people.
-b
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail. You can E-mail
[EMAIL PROTECTED] for assistance. You can visit our web
site at http://www.declude.com .
RE: DSN:Re: [Declude.JunkMail] Bounce strategies?
Ditto on Outlook 2000. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of David Lewis-Waller Sent: Monday, May 20, 2002 4:06 PM To: '[EMAIL PROTECTED]' Subject: RE: DSN:Re: [Declude.JunkMail] Bounce strategies? As a matter of reference we're using Rules in Outlook Express 6 and Outlook 2000/2, I can't say what the level of support for rules is in Outlook for older verions. David WiSS Limited -Original Message- From: R. Scott Perry [mailto:[EMAIL PROTECTED]] Sent: 20 May 2002 21:02 To: [EMAIL PROTECTED] Subject: RE: DSN:Re: [Declude.JunkMail] Bounce strategies? That's because Outlook and/or Outlook Express don't have useable filters. That's not entirely true. While Outlook doesn't have built-in filters to look for X-RBL-Warning:, it can be configured to look in the headers for this string and be filtered. By usable filters, I mean being able to filter on headers (which *any* mail client with filters should allow for). It sounds like there are some versions of Outlook and/or Outlook Express that can filter on headers, but there are also many that can not. I don't have a list of which versions do and which do not. However, I have heard from a lot of people (admins) that say that they can't find any way for (some versions of) Outlook and/or Outlook Express to filter on headers. It sounds like Microsoft may not have allowed header filtering in the past, but perhaps more recent versions do. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
RE: [Declude.JunkMail] Reverse DNS
Instead of going through all of that, you can just delete the root zone indicated with a . and Win2K will start using the root servers as it already has them configured. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Mark Smith Sent: Friday, May 17, 2002 9:20 AM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Reverse DNS FWIW, If that server is W2k and DNS was configured without an active Internet connection, then DNS will not download the root servers and nothing will work. You might want to try un-installing the W2k DNS service and re-installing with an active Internet Connection. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of R. Scott Perry Sent: Friday, May 17, 2002 9:09 AM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Reverse DNS Our primary DNS is 213.210.8.110 That's the problem. You DNS server is saying that nothing exists (reverse DNS lookups, MX record lookups, etc.). That's a serious problem that needs to be fixed. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
RE: [Declude.JunkMail] LOGLEVEL in Global.cfg
From http://www.declude.com/junkmail/manual.htm Log File Location: To change the location of the log file, look for the line that begins with LOGFILE, and you can change the name of the log file there. You can also change the level of logging (ERROR to only record error messages, WARNING will also record warning messages, LOW to report basic information about each message, MID to report slightly more information, HIGH to report a lot of information, or DEBUG to report as much information as possible (this should not normally be used). -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of John Tolmachoff Sent: Friday, February 22, 2002 1:24 PM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail] LOGLEVEL in Global.cfg What are the available options? John Tolmachoff IT Manager Network Engineer 211 E. Imperial Hwy., Suite 106 Fullerton, CA 92835 714-578-7999, ext. 104 [EMAIL PROTECTED] www.reliancesoft.com --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
