[Declude.Virus] False catch of Outlook Mime

2003-01-04 Thread Jonathan
Is there a way to either globally allow Outlook 'MIME header' 
Vulnerability from a certain remote address?  The remote address is 
sending a wav file, via sendmail -- everything seems to be properly done, 
but Declude is catching it, thinking it's unsafe.

If that's not possible, how do you globally allow mail to pass unscanned 
from a certain remote user? Or does it *need* to be on a per-local-domain 
basis?

Thanks,

Jonathan

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.


Re: [Declude.Virus] False catch of Outlook Mime

2003-01-04 Thread R. Scott Perry


Is there a way to either globally allow Outlook 'MIME header' 
Vulnerability from a certain remote address?

No.


If that's not possible, how do you globally allow mail to pass unscanned 
from a certain remote user? Or does it *need* to be on a per-local-domain 
basis?

You would have to disable scanning *to* the user.

What version of Declude Virus are you running (\IMail\Declude -diag from 
a command prompt)?  I believe there a beta that would cause false positives 
on .wav files that were sent without an E-mail (IE an attachment only, 
without a message body (even a blank one) being sent).
-Scott

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.


Re: [Declude.Virus] False catch of Outlook Mime

2003-01-04 Thread Jonathan
I also just updated to the current 1.65, just in case that was the issue. 
It doesn't seem to make a difference, though.

I kept my same configs for both AV and Junkmail from 1.60, I hope they're 
forward compatible?

Jonathan

At 01:28 PM 1/4/2003 -0600, you wrote:
At 02:22 PM 1/4/2003 -0500, you wrote:


Is there a way to either globally allow Outlook 'MIME header' 
Vulnerability from a certain remote address?

No.


If that's not possible, how do you globally allow mail to pass unscanned 
from a certain remote user? Or does it *need* to be on a 
per-local-domain basis?

You would have to disable scanning *to* the user.

What version of Declude Virus are you running (\IMail\Declude -diag 
from a command prompt)?  I believe there a beta that would cause false 
positives on .wav files that were sent without an E-mail (IE an 
attachment only, without a message body (even a blank one) being sent).


Diagnostics ON (Declude v1.60).



---
[This E-mail was scanned for viruses by Declude Virus 
(http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus 
(http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.



RE: [Declude.Virus] copyall_account

2003-01-04 Thread John Tolmachoff
Yep, now it shows the actual address. Thanks.

John Tolmachoff MCSE, CSSA
IT Manager, Network Engineer
RelianceSoft, Inc.
Fullerton, CA  92835
www.reliancesoft.com


 -Original Message-
 From: [EMAIL PROTECTED] [mailto:Declude.Virus-
 [EMAIL PROTECTED]] On Behalf Of John Tolmachoff
 Sent: Thursday, January 02, 2003 7:14 AM
 To: [EMAIL PROTECTED]
 Subject: RE: [Declude.Virus] copyall_account
 
  The next interim release will send the notification to the copyall
 account.
 
 Thanks.
 
 John Tolmachoff MCSE, CSSA
 IT Manager, Network Engineer
 RelianceSoft, Inc.
 Fullerton, CA  92835
 www.reliancesoft.com
 
 
 
 ---
 [This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]
 
 ---
 This E-mail came from the Declude.Virus mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.Virus.The archives can be found
 at http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.



RE: [Declude.Virus] False catch of Outlook Mime

2003-01-04 Thread John Tolmachoff
I am sure Scott will respond, but please upgrade to the latest release,
1.65.

John Tolmachoff MCSE, CSSA
IT Manager, Network Engineer
RelianceSoft, Inc.
Fullerton, CA  92835
www.reliancesoft.com


 -Original Message-
 From: [EMAIL PROTECTED] [mailto:Declude.Virus-
 [EMAIL PROTECTED]] On Behalf Of Jonathan
 Sent: Saturday, January 04, 2003 11:29 AM
 To: [EMAIL PROTECTED]
 Subject: Re: [Declude.Virus] False catch of Outlook Mime
 
 At 02:22 PM 1/4/2003 -0500, you wrote:
 
 Is there a way to either globally allow Outlook 'MIME header'
 Vulnerability from a certain remote address?
 
 No.
 
 If that's not possible, how do you globally allow mail to pass unscanned
 from a certain remote user? Or does it *need* to be on a
per-local-domain
 basis?
 
 You would have to disable scanning *to* the user.
 
 What version of Declude Virus are you running (\IMail\Declude -diag
from
 a command prompt)?  I believe there a beta that would cause false
 positives on .wav files that were sent without an E-mail (IE an
attachment
 only, without a message body (even a blank one) being sent).
 
 
 Diagnostics ON (Declude v1.60).
 
 
 ---
 [This E-mail was scanned for viruses by Declude Virus
 (http://www.declude.com)]
 
 ---
 This E-mail came from the Declude.Virus mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.Virus.The archives can be found
 at http://www.mail-archive.com.
 
 ---
 [This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]
 
 ---
 This E-mail came from the Declude.Virus mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.Virus.The archives can be found
 at http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.