[Declude.Virus] loganalyzer

2003-09-02 Thread ISPhuset Nordic AS
Anyone here having anything like the domlist.exe for the virus log

I would like to create som stats for who is sending virus and to whom its coming

Benny

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.


Re: [Declude.Virus] FW: WARNING: YOU MAY HAVE A VIRUS

2003-09-02 Thread paul
John, Scott, everyone.

Question to this.

I have the SKIPIF lines in my eml files, but I was curious, what happens
to the corrupt versions of Sobig, etc that the attachments get through due
to no virus? Since these return addresses are no doubt bogus, is there a
guard against this? Do we have a SKIPIFATTACHMENTIS .scr option?

Paul


---
[This E-mail scanned for viruses by Declude Virus]

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.


Re: [Declude.Virus] FW: WARNING: YOU MAY HAVE A VIRUS

2003-09-02 Thread R. Scott Perry

I have the SKIPIF lines in my eml files, but I was curious, what happens
to the corrupt versions of Sobig, etc that the attachments get through due
to no virus? Since these return addresses are no doubt bogus, is there a
guard against this? Do we have a SKIPIFATTACHMENTIS .scr option?
No, there is no way to do that.

   -Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers.
Declude Virus: Catches known viruses and is the leader in mailserver 
vulnerability detection.
Find out what you have been missing: Ask for a free 30-day evaluation.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.


[Declude.Virus] multiple recipients Bugbear.B

2003-09-02 Thread Markus Gufler
Hi Virus-fighters  :-)

Before I will contact IPSwitch I would ask other declude virus users if
they can confirm this possible issue:

In the past 3 days I've seen multiple hold messages infected with
W32/[EMAIL PROTECTED] and having a long, coma-separated list of recipient
email addresses. At least on of this addresses is local but most of them
are email addresses on other servers.

A warning message for every single recipient is send out, but I've seen
that most of the recieving smtp servers will interrupt the delivery
after recieving the smtp-sender address: This address is indicated like 

[EMAIL PROTECTED]

No  in front but a  at the end.
Scott says this must be an issue with imail1.exe
Our eml-files has [EMAIL PROTECTED] without any  or  in the
from-line.

Anyone else can confirm this behavior?

Markus


---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.


[Declude.Virus] Notification question

2003-09-02 Thread serge
scott

if a notification  need to go to %allrecep% and allrecep has many adresses
both local and remote,
what happens if we use onlysendiflocalrecep?

1-notification is sent only to local recep.
2-notification is sent to all recep
or 3- no notification is sent


---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.