[Declude.JunkMail] Sobig Assault
Hi, Many of our users are getting plowed by Sobig, Declude and Fprot do there job well, but the users mailbox is getting clogged with the notices of detection. Is there a way to turn off notices for a particular virus? For now I've removed the mail templates. Any ideas? --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] How can I turn off Virus Scanning on a specific user (Pro Ver)
Hi, I've asked this before but, forgot (also the archives have forgot too :) Is it possible to remove virus scanning from one user? Regards, Malcolm --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Server change over
Hi, Over the holiday our mail server blew up big time, I loaded up a new server but with a different machine name. Now junkmail/virus pro doesn't like my CODE # I've forgotten the procedure and info required to get a new one Regards, Malcolm --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Setting the Warn message
Hi, How can I set the warn message, I seem to no be getting anything tagged by declude. Regards --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Setting the Warn message
Hi Scott, My bad I goofed up :), added a test but forgot to add an action. But having trouble understanding the Headers test and how its used If want it to look for X-XtremeMailControl: Warning and add a weight of 5 to the message. Is the following correct HEADERS 5 CONTAINSX-XtremeMailControl: Warning Also does anything have to be added to the junkmail file Regards -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of R. Scott Perry Sent: Saturday, November 30, 2002 3:36 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] Setting the Warn message How can I set the warn message, I seem to no be getting anything tagged by declude. The WARN message will be there by default. For example, SPAMHEADERS WARN would produce a header X-RBL-Warning: ... if the E-mail failed the SPAMHEADERS test. Is the problem that another action is being taken (such as the E-mail being held), or is Declude not working at all? -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] How can I let mails with 'Blank Folding' Vulnerability
Thanks, I agree we'll take the later tact at first -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of R. Scott Perry Sent: Wednesday, June 12, 2002 10:10 AM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] How can I let mails with 'Blank Folding' Vulnerability Using the pro version of AV how can I allow mail for a certain user through even though it has been detected with the Outlook 'Blank Folding' Vulnerability. The mail also contains important attachments for this user. You can turn off virus scanning for that one user if you want. There is no way to disable just the vulnerability tests for a specific user. The only option to make sure that viruses aren't intentionally allowed through, however, is to get the person sending the E-mail to fix the problem. With the current situation with spam and viruses, people sending broken mail and mail that could be dangerous are going to have to learn to fix these problems. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
[Declude.JunkMail] Just a heads up, spelling error :)
Hi Scott, Theres a spelling error in the virus.cfg file from you site. LOGFILE had C:\Imali.. J Regards, Mal
RE: [Declude.JunkMail] more spam lately?
Its all the summer blowout sales on $5 diplomas :) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Jim Jones, Jr. Sent: Friday, September 07, 2001 9:33 AM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail] more spam lately? I have seen more spam get through in the last few weeks then ever before. I am still catching a bunch, but it seems that I am not blocking something that I should. Could someone recommend what may be added/changed to this part of my config (see below) to do a better job of catching spam? Thanks, Jim RBL WARN DUL WARN RSS LOG #ORBSINPUTS LOG #ORBSOUTPUTS LOG #ORBSGRACE LOG #ORBSMAN LOG #ORBSSRC LOG #ORBSNET LOG #ORBSSRCNET LOG #ORBSTESTING LOG OSRELAY LOG OSDUL WARN OSSRC WARN OSSMART LOG OSSOFT WARN #IGNORANT LOG MAILFROM WARN BADHEADERS WARN SPAMHEADERS WARN SPAMROUTING WARN REVDNS LOG --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
RE: [Declude.JunkMail] www.DNSReport.com - Error if no MX record
IS this Right??? is the previouse message and it headers -Original Message- Received: from declude.com [198.115.176.13] by aztec-net.com with ESMTP (SMTPD32-6.06) id A292218400F0; Wed, 05 Sep 2001 14:44:34 -0400 Received: from hm-software.com [63.107.174.78] by declude.com with ESMTP (SMTPD32-7.03) id A2BBDA5025E; Wed, 05 Sep 2001 14:45:15 -0400 Received: from corneroffice [63.107.174.135] by hm-software.com (SMTPD32-6.06) id A26D8CE03F2; Wed, 05 Sep 2001 14:43:57 -0400 From: Andy Schmidt [EMAIL PROTECTED] To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] www.DNSReport.com - Error if no MX record Date: Wed, 5 Sep 2001 14:43:56 -0400 Message-ID: 004901c1363a$b88e4860$[EMAIL PROTECTED] MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit X-Priority: 3 (Normal) X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook CWS, Build 9.0.2416 (9.0.2911.0) In-Reply-To: [EMAIL PROTECTED] X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4807.1700 Importance: Normal X-Declude-Sender: [EMAIL PROTECTED] [63.107.174.135] X-Declude-Spoolname: D726d3f2.SMD X-Note: Report any abuse to [EMAIL PROTECTED] X-Declude-Sender: [EMAIL PROTECTED] [63.107.174.78] X-Declude-Spoolname: D72bb25e.SMD X-Note: This E-mail was scanned for viruses by Declude (www.declude.com) X-NRecips: 1 X-Reverse-IP: mail.hm-software.com. Precedence: bulk Sender: [EMAIL PROTECTED] Reply-To: [EMAIL PROTECTED] X-Declude-Sender: [EMAIL PROTECTED] [63.107.174.78] X-Declude-Spoolname: D88e12d6.LST X-Note: This E-mail was scanned for viruses by Declude (www.declude.com) Organization: Computerized Horizons X-RBL-Warning: This E-mail came from 198.115.176.13, a potential spam source. X-Note: This E-mail was scanned by Declude JunkMail (www.declude.com) for spam. X-RCPT-TO: [EMAIL PROTECTED] X-UIDL: 1272 Status: U From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Andy Schmidt Sent: Wednesday, September 05, 2001 2:44 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] www.DNSReport.com - Error if no MX record Hi Scott: Here another domain I'm working on http://www.dnsreport.com/tools/dnsreport.ch?domain=Supremesshoes.com This is just a mirror domain, it has no MX records (it only has the domain CNAME). Now take a look at the MX record analysis. 1) The report says: You have 1 MX record: but doesn't list a host name. Then the report apparently tries to continue analyzing that non-existing non-specified host - even tries a reverse lookup against it. 2) Mulitple MX records There is a spelling error in Multiple. Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
[Declude.JunkMail] Feature Request - Virus name Alias
Hi, This my seem odd, but I would like to have a file for the antivirus where I can define an alias for a virus name. By doing this I can have the notification email send a valid link to the sender about the virus. For example: W95/Busm.1445 is what Fprot reports, but there is a link to information at http://www.antivirus.com/vinfo/virusencyclo/default5.asp?VName=PE_SPACES.144 5 I would be a great thing if I could inform declude or fprot to use this other name. Ideas? --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
[Declude.JunkMail] Feature Request - Adjustable failed message sampling
Hi, (Request 1) An ability to have duplicates of all/some (by test?) detected spam. might help diagnose some problems easier. I.e. to a admin mailbox. One useful adjustment might be to select the information that is duplicated. like just header info or the entire message. (Request 2) have declude run a test against a admin provided test file (common words, 'DO NOT MISS OUT!!' 'check this out') the nice thing would to be able to submit a new string to declude, by sending it a email. ([EMAIL PROTECTED]) Hope these help out Regards, Malcolm Kynoch Network Administrator Aztec Computer --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
