[Declude.Virus] OT: Outlook 2000 not MIME compliant

2003-03-14 Thread Rasmus Aaen
Hi all,

I just had one of our clients tell me that email from us was cached in their
mailscanner because the email isn't MIME compliant (RFC 1341).

rfc1341
The encapsulation boundary following the last body part is a distinguished
delimiter that indicates that no further body parts will follow.  Such a
delimiter  is  identical  to  the previous  delimiters,  with the addition
of two more hyphens at the end of the line:
  --gc0p4Jq0M2Yt08jU534c0p--
end rfc1341

It turned out they were quite right - Outlook happily placed an End
delimiter between the HTML text of the email and a word attachment. Is this
a known bug? I've done som testing, and this appears to happen whenever I
send a HTML email with an attachment. We are using Outlook 2000 (build
9.0.0.6627).

Should I report this to Microsoft or is it not worth the trouble?

Thanks.

/Rasmus

---
[Denne E-mail blev scannet for virus af Declude Virus]
[This E-mail was scanned for viruses by Declude Virus]

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.


Re: [Declude.Virus] OT: Outlook 2000 not MIME compliant

2003-03-14 Thread R. Scott Perry

It turned out they were quite right - Outlook happily placed an End
delimiter between the HTML text of the email and a word attachment. Is this
a known bug? I've done som testing, and this appears to happen whenever I
send a HTML email with an attachment. We are using Outlook 2000 (build
9.0.0.6627).
Should I report this to Microsoft or is it not worth the trouble?
Would you mind sending an E-mail like that to [EMAIL PROTECTED], so 
that we can examine it?  I'll let you know what we find out.
-Scott

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.


[Declude.Virus] BANEXT not working

2003-03-14 Thread Scott Huber
Hello,
I am running Declude 1.65 with F-Prot 3.12b.  All virus scanning works
fine, as I receive several notifications weekly regarding infected
emails.  However, the BANEXT feature does not seem to be working.  I
sent test emails with VBS attachments and they got through.  Here's the
BANEXT portion of my virus.cfg:

#

BANEXT  scr
BANEXT  pif
BANEXT  exe
BANEXT  COM
BANEXT  VBS


#

It's basically the default virus.cfg from the manual.

After I get this issue resolved, I plan on adding the extensions people
have talked about in previous posts.

Is there any other information you would need to know to help me rectify
this, such as logs or the like?

Thanks!
Scott Huber
Orion Medical Management


---
[This E-mail scanned for viruses by Declude Virus on the Orion Medical Management 
iMail server]


--

This message is intended for the use of the individual or entity to which it is 
addressed and may contain information that is confidential and privileged and exempt 
from disclosure under applicable law.  If the reader of this message is not the 
intended recipient, you are hereby notified that any dissemination, distribution, or 
copying of the communication is strictly prohibited.  If you have received this 
communication in error, please contact the sender immediately and delete it from your 
system.  Thank you, Orion Medical Management Inc., Radiology Associates of Tampa.

--
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.


[Declude.Virus] Recommendation: STRIPATTACHMENT

2003-03-14 Thread Jack Taugher
Is there any way in which Declude Virus could have an option called
STRIPATTACHMENT which would provide cross functionality between an virus
infected email and a banned attachment?

That is that, while we BAN attachments of MP3, PIF, SCR, etc .. we would
like the message to be able to go through on certain extensions.  Namely
EXE, so that at least the sender/recipient can make an alternate means for
sending the item.  While a message is sent with BAN to various identified
parties, they often don't understand what to do.  If the STRIPATTACHMENT
feature were possible, then it would be nice for it to strip the attachment
off, and place a header in the message saying that The attachment(s) which
originally were attached to this message are banned at the
mail.alliance1.org mail-server.  However the text of the message
follows:.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.


Re: [Declude.Virus] Feature Request for Banned File Extensions

2003-03-14 Thread Jack Taugher
The point is, there are times as support for a national software program for
non-profit organizations, that we need to send just a DLL to a client who
has deleted it.  They aren't smart enough to use WINZIP.

- Original Message -
From: Chris Hunt [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Tuesday, February 18, 2003 9:46 AM
Subject: Re: [Declude.Virus] Feature Request for Banned File Extensions


 Rick, I understand  your concern but with all the viruses out there the
 banext is an extra layer of protection.  You could just remove the lines
in
 the virus.cfg and just trust Declude and your AV program to catch the bad
one.

 Would it not save a ton-o-bandwidth if the poster of a mailing list just
 put the file on some FTP/WWW site and include the link?

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.


RE: [Declude.Virus] Recommendation: STRIPATTACHMENT

2003-03-14 Thread Markus Gufler
If this will be a future feature please also provide a posibility to add
a custom message. 

Thanks
Markus


 -Original Message-
 From: [EMAIL PROTECTED] 
 [mailto:[EMAIL PROTECTED] On Behalf Of Jack Taugher
 Sent: Friday, March 14, 2003 4:32 PM
 To: [EMAIL PROTECTED]
 Subject: [Declude.Virus] Recommendation: STRIPATTACHMENT
 
 
 Is there any way in which Declude Virus could have an option 
 called STRIPATTACHMENT which would provide cross 
 functionality between an virus infected email and a banned attachment?
 
 That is that, while we BAN attachments of MP3, PIF, SCR, 
 etc .. we would like the message to be able to go through on 
 certain extensions.  Namely EXE, so that at least the 
 sender/recipient can make an alternate means for sending the 
 item.  While a message is sent with BAN to various identified 
 parties, they often don't understand what to do.  If the 
 STRIPATTACHMENT feature were possible, then it would be nice 
 for it to strip the attachment off, and place a header in the 
 message saying that The attachment(s) which originally were 
 attached to this message are banned at the 
 mail.alliance1.org mail-server.  However the text of the 
 message follows:.
 
 ---
 [This E-mail was scanned for viruses by Declude Virus 
(http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.


---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.


RE: [Declude.Virus] Recommendation: STRIPATTACHMENT

2003-03-14 Thread John Tolmachoff
 If this will be a future feature please also provide a posibility to add
 a custom message.

Instead of going the route of having that option, I would rather have a link
in the notification that they can click on that will provide more
information and an explanation of what to do.

Just my .02.

John Tolmachoff MCSE, CSSA
IT Manager, Network Engineer
RelianceSoft, Inc.
Fullerton, CA  92835
www.reliancesoft.com



---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.


[Declude.Virus] F-prot questions

2003-03-14 Thread Royce Burnett
Ok, fresh user of Declude Virus here, so please excuse...

Got the declude running, it seems to be catching viruses and sending emails
to the correct recipients. I set everything up as per the manual. So far so
good.

My question is, other than not installing the Real time portion of F-Prot,
what else do I need to do with the f-prot settings? other than the updating
scheduler, obviously. 

If there's nothing else to be done with F-prot, then this has to be the
most painless installation of any program I've ever had anything to do with
on our server.

Royce Burnett
CICI

---
[This E-mail scanned for viruses by Declude Virus]

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.