Re: [Declude.Virus] Stop warnings by domain?

2002-07-08 Thread R. Scott Perry


>Is there a way to keep from sending warning emails to certain domains, like
>AOL?

No, there is not.

>I am getting tired of AOL users writing postmaster back and saying they do
>not have a virus or that they do not know who sent it to them, etc... it
>wastes a lot of my time!

Perhaps you could have the notifications sent from an account other than 
the postmaster account, and occasionally check the account for new mail?

We will likely be adding the ability to block the notifications to certain 
users/domains at some point.
   -Scott

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .



[Declude.Virus] New viRUS - W32.Liac

2002-07-08 Thread Jonathan

Interesting new virus, shouldn't take long till we start seeing this show 
up in our traps, I'm afraid ..

http:[EMAIL PROTECTED]

Symantec Security Response is reporting a new Level 3  mass mailer worm 
Called W32.Liac.A@mm.  W32.Liac.A@mm is a mass mailer that emails itself to 
all addresses in the Outlook Address Book.  Security Response is currently 
analyzing the worm, more information will follow.   Tentative ETA for 
Intelligent Updater defs is 8:30 AM US Pacific Standard Time, tentative ETA 
for LiveUpdate definitions is 9:00 AM US Pacific Standard Time.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .



RE: [Declude.Virus] New viRUS - W32.Liac

2002-07-08 Thread John Tolmachoff

Being that this comes as an .exe attachment, those with a banned
extension policy will be afforded that protection until the AV companies
come out with updated definitions.

John Tolmachoff
IT Manager, Network Engineer
RelianceSoft, Inc.
Fullerton, CA  92835
www.reliancesoft.com

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of Jonathan
Sent: Monday, July 08, 2002 6:30 AM
To: [EMAIL PROTECTED]
Subject: [Declude.Virus] New viRUS - W32.Liac

Interesting new virus, shouldn't take long till we start seeing this
show 
up in our traps, I'm afraid ..

http:[EMAIL PROTECTED]

Symantec Security Response is reporting a new Level 3  mass mailer worm 
Called W32.Liac.A@mm.  W32.Liac.A@mm is a mass mailer that emails itself
to 
all addresses in the Outlook Address Book.  Security Response is
currently 
analyzing the worm, more information will follow.   Tentative ETA for 
Intelligent Updater defs is 8:30 AM US Pacific Standard Time, tentative
ETA 
for LiveUpdate definitions is 9:00 AM US Pacific Standard Time.

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .



Re: [Declude.Virus] Stop warnings by domain?

2002-07-08 Thread Sheldon Koehler

> Perhaps you could have the notifications sent from an account other than
> the postmaster account, and occasionally check the account for new mail?

I would still get the emails... it is really just AOL I want to keep from
sending notifications to.

> We will likely be adding the ability to block the notifications to certain
> users/domains at some point.

Cool! I did get a user that threw a fit about the number of notifications he
received. I did take the time to explain to him about why and so on and he
understood. It would be nice to add his name only to a block list.


Sheldon


Sheldon Koehler, Owner/Partnerhttp://www.tenforward.com
Ten Forward Communications   360-457-9023
Nationwide access, neighborhood support!

"Whenever you find yourself on the side of the majority, it's time
to pause and reflect." Mark Twain



---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .



[Declude.Virus] McAfee update

2002-07-08 Thread John Tolmachoff

To those interested in the topic of virus scanner cost a few weeks ago,
here is an update on my conversations with McAfee.

Not Good.

If we got the rate of their best client, we would pay about $2,000 per
year.

Any we are a small shop.

:(

John Tolmachoff 
IT Manager, Network Engineer
Fullerton, CA  92835
www.reliancesoft.com
 
 

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .



[Declude.Virus] Virus Scanner

2002-07-08 Thread John Tolmachoff

OK, so now I am going to throw this question out there.

Aside from F-Prot, which other low cost virus scanners are Declude users
using?

John Tolmachoff
IT Manager, Network Engineer
RelianceSoft, Inc.
Fullerton, CA  92835
www.reliancesoft.com
 

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .



Re: [Declude.Virus] Virus Scanner

2002-07-08 Thread Sheldon Koehler

> Aside from F-Prot, which other low cost virus scanners are Declude users
> using?

I have been so pleased with F-Prot that I have not looked anywhere else. I
started with it because of price, but we quickly replaced McAffee around the
office with the site license version of F-Prot.

Sheldon


Sheldon Koehler, Owner/Partnerhttp://www.tenforward.com
Ten Forward Communications   360-457-9023
Nationwide access, neighborhood support!

"Whenever you find yourself on the side of the majority, it's time
to pause and reflect." Mark Twain



---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .



Re: [Declude.Virus] Virus Scanner

2002-07-08 Thread John Fassbender

Hello John,

Monday, July 08, 2002, 4:21:02 PM, you wrote:

JT> OK, so now I am going to throw this question out there.

JT> Aside from F-Prot, which other low cost virus scanners are Declude users
JT> using?

JT> John Tolmachoff
JT> IT Manager, Network Engineer
JT> RelianceSoft, Inc.
JT> Fullerton, CA  92835
JT> www.reliancesoft.com
JT>  

JT> ---
JT> [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

JT> This E-mail came from the Declude.Virus mailing list.  To
JT> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
JT> type "unsubscribe Declude.Virus".  You can E-mail
JT> [EMAIL PROTECTED] for assistance.  You can visit our web
JT> site at http://www.declude.com .


We are using the dual scanner option with F-Prot as our primary and
Norman as are secondary.  Norman, I believe, was $59.50 / year.

Best regards,
John Fassbender   mailto:[EMAIL PROTECTED]
Fastbytes



---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .



Re: [Declude.Virus] Not receiving emails

2002-07-08 Thread R. Scott Perry


>Scott,

First, I should mention that this is the Declude Virus mailing list, and 
everyone on this list is getting a copy of this.

>I just received a call from someone trying to send me email for 3 days.
>Is returned saying "uynknown account".

That's not a Declude issue.  Declude doesn't touch the E-mail until after 
it arrives.

>I am also not receiving the declude list mail.

That's because your mail is bouncing.

>Please look at the attached log file to make sure my declude is set up
>correctly.

Since Declude isn't even seeing these E-mails, the Declude log file won't help.

The problem seems to be that you changed your DNS entries so that your MX 
record points to an IP, rather than a host name.  That's the E-mail 
equivalent of sending a letter to "(212) 555-1212" -- although you and I 
can tell that it is a phone number, a computer that expects an address 
won't be able to figure out what address that is.

In the meantime, I've re-added you to the list, and hard-coded your DNS 
information here so you'll get this.
   -Scott

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .



RE: [Declude.Virus] Not receiving emails

2002-07-08 Thread Doug McKee

Thanks for the help.
We named the MX record. Hopefully that will take care of the problem.
Doug


---
[This E-mail scanned for viruses by Declude Virus]

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .



RE: [Declude.Virus] Virus Scanner

2002-07-08 Thread Thomas E. Hall

Hello,

Is there anywhere you can check what viruses are blocked with the current
definitions of F-Prot.  Such as the new virus W32.Liac do the new July 8th
def's handle that virus??

Thank you,

Thomas Hall

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Sheldon Koehler
Sent: Monday, July 08, 2002 4:26 PM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.Virus] Virus Scanner


> Aside from F-Prot, which other low cost virus scanners are Declude users
> using?

I have been so pleased with F-Prot that I have not looked anywhere else. I
started with it because of price, but we quickly replaced McAffee around the
office with the site license version of F-Prot.

Sheldon


Sheldon Koehler, Owner/Partnerhttp://www.tenforward.com
Ten Forward Communications   360-457-9023
Nationwide access, neighborhood support!

"Whenever you find yourself on the side of the majority, it's time
to pause and reflect." Mark Twain



---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .

--
[This E-mail scanned for viruses by Declude Virus]



--
[This E-mail scanned for viruses by Declude Virus]

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .



RE: [Declude.Virus] Virus Scanner

2002-07-08 Thread R. Scott Perry


>Is there anywhere you can check what viruses are blocked with the current
>definitions of F-Prot.

You can type "F-Prot /VIRLIST" to see a list of the viruses that it knows of.
   -Scott

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .



RE: [Declude.Virus] Virus Scanner

2002-07-08 Thread Thomas E. Hall

Thank you

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of R. Scott Perry
Sent: Monday, July 08, 2002 6:11 PM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.Virus] Virus Scanner



>Is there anywhere you can check what viruses are blocked with the current
>definitions of F-Prot.

You can type "F-Prot /VIRLIST" to see a list of the viruses that it knows
of.
   -Scott

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .

--
[This E-mail scanned for viruses by Declude Virus]



--
[This E-mail scanned for viruses by Declude Virus]

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .



HELO:Re: [Declude.Virus] Virus Scanner

2002-07-08 Thread Jerry Murdock

NOD32 has uncluttered server licensing at $300. Same for Kaspersky but at
$560. Not sure how compatible with Declude either of the report formats are.

Norman is decent and will install, but licensing may be an issue.

Trend's PCScan is freely available via their emergency disk download, with
no published restrictions on it's use.  Whether  it's OK to use or not is a
matter for a lawyer.  It's report format is not compatible with Declude
though.  It works OK, but Declude will report the virus as unknown.  99.9+%
of the time F-Prot catches infections and my Declude notifications include
the virus name.

At my Declude site, I'm using  F-Prot as my first scanner, and PCScan with
the latest beta patterns as the second.  On the desktops we're running
Trend, so licensing isn't an issue.

Jerry

- Original Message -
From: "John Tolmachoff" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Monday, July 08, 2002 5:21 PM
Subject: [Declude.Virus] Virus Scanner


OK, so now I am going to throw this question out there.

Aside from F-Prot, which other low cost virus scanners are Declude users
using?

John Tolmachoff
IT Manager, Network Engineer
RelianceSoft, Inc.
Fullerton, CA  92835
www.reliancesoft.com


---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .



RE: [Declude.Virus] McAfee update

2002-07-08 Thread Bill Landry

Thanks for the update, John!  That was my suspicion from reading their
license and speaking with our account rep, and why we opted not to use
McAfee on our IMail/Declude server.

Bill

-Original Message-
From: John Tolmachoff [mailto:[EMAIL PROTECTED]]
Sent: Monday, July 08, 2002 1:59 PM
To: [EMAIL PROTECTED]
Subject: [Declude.Virus] McAfee update


To those interested in the topic of virus scanner cost a few weeks ago,
here is an update on my conversations with McAfee.

Not Good.

If we got the rate of their best client, we would pay about $2,000 per
year.

Any we are a small shop.

:(

John Tolmachoff 
IT Manager, Network Engineer
Fullerton, CA  92835
www.reliancesoft.com
 
 

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .

---
[This e-mail was scanned for viruses by Pointshare's Virus Scanning Service]
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .