Re: [Declude.Virus] Notification for forwarded messages
Great Idea! I will add that and post the files Rick Davidson National Systems Manager North American Title Group - - Original Message - From: "John Tolmachoff (Lists)" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Friday, May 28, 2004 12:57 PM Subject: RE: [Declude.Virus] Notification for forwarded messages > I have written a simple app using ASP and PERL that will move the > quarantined file from the virus directory back to the spool for delivery. It > requires IIS to run on the same box as Imail, I run gateway servers so it is > a bit easier for me. > > I include the spool name and a link to the gateway server that held the file > in the BanNotify message, the user copies the file name and pastes it to > text box on the ASP page, clicking submit sends it to the PERL script which > moves the file back to the spool. I would be interested. However, I would like to see 1 extra step. They would be taken to a page that would explain the possible problems that could happen should they run a malicious file and have to enter their name and e-mail address to be recoreded and hit an accept button before being taken to the page where they can then paste in the file name to retrieve. John Tolmachoff Engineer/Consultant/Owner eServices For You --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
Re: [Declude.Virus] Notification for forwarded messages
Doug
How do you deal with IIS and IMail web servers both running on the same box and both
wanting port 80?
I have broken up iissocketpooling in the past but it requires 2 IP addresses to work.
Is that what you have done or are you running one on a non standard port?
Thanx
-Original Message-
From: "Douglas Cohn" <[EMAIL PROTECTED]>
Date: Fri, 28 May 2004 12:28:22
To:<[EMAIL PROTECTED]>
Subject: RE: [Declude.Virus] Notification for forwarded messages
We do this as well using Vbscript only. It does exactly what you do.
Anytime a virus is quarantined an email with a link to the file is sent to
the recepient with a warning of the dangers involved in retrieving the
files. We then delete everything over 5 days old to avoid getting too many
files in the virus dir.
We also require IIS to be running. It was written by an ISP that uses it on
his shared IMAIL server. He deletes them in 2 days.
=
You add this to the recip.eml
=
If you would like a copy of the infected email please follow the link below
AT YOUR OWN RISK!!!
http://serverwithvirus.com:port/declude.asp?msgid=%QUEUENAME%
REMEMBER IT IS AN INFECTED EMAIL. The email will be deleted in 5 days.
The declude.asp file
<[EMAIL PROTECTED]>
<%
var virusdir="c:\\imail\\spool\\virus\\";
var spooldir="c:\\imail\\spool\\";
var file=""+Request.QueryString("msgid");
file=file.substr(1);
fso = new ActiveXObject ("Scripting.FileSystemObject");
if (fso.FileExists(virusdir+"D"+file))
{
fso.MoveFile(virusdir+"D"+file, spooldir+"D"+file);
fso.MoveFile(virusdir+"Q"+file, spooldir+"Q"+file);
Response.Write("Please check your e-mail in a few minutes for the virus
infected message you requested."); } %>
Very simple as well.
Doug
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Rick Davidson
Sent: Friday, May 28, 2004 11:01 AM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.Virus] Notification for forwarded messages
I have written a simple app using ASP and PERL that will move the
quarantined file from the virus directory back to the spool for delivery. It
requires IIS to run on the same box as Imail, I run gateway servers so it is
a bit easier for me.
I include the spool name and a link to the gateway server that held the file
in the BanNotify message, the user copies the file name and pastes it to
text box on the ASP page, clicking submit sends it to the PERL script which
moves the file back to the spool.
I then intercept all notifications for banned files that I dont want them
retreiving such as mpegs and mp3s
Works great
I dont mind sharing the code if anyone wants it
Rick Davidson
National Systems Manager
North American Title Group
-
- Original Message -
From: "Hermann Strassner" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Friday, May 28, 2004 6:39 AM
Subject: [Declude.Virus] Notification for forwarded messages
Hello!
We block ZIPs and some executable extensions and want to leave it this
way. Because some folks need to send them, we have to check the
quarantined files (for viruses) and forward the mails without viruses
manually. Is there a way to inform the user that his mail is now
forwarded?
Alternatively, is it possible for the user to answer to the automatic
generated mail and forward the mail by himself? Is it possible somehow?
I think of it as follows: User sends email with ZIP, gets a
notification, answers to the notification with YES or something like
that, Declude sees it and forwards this email. I think this is enough to
make sure the user sends the email intentionally.
Hermann
---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]
---
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".The archives can be found
at http://www.mail-archive.com.
---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]
---
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".The archives can be found
at http://www.mail-archive.com.
---
[This E-mail scanned for viruses by Declude Virus]
---
[This E-mail scanned for viruses by Declude Virus]
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".The archives can be found
at http://www.mail-archive.com.
---
[This E-mail scanned for viruses by Declude Virus]
Goran Jovanovic
The LAN Shoppe
O: (416) 440-1167 x-2113
C: (416) 931-0688
E: [EMAIL PROTECTED]
Sent from my Wireless Blackberry
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the
RE: [Declude.Virus] Notification for forwarded messages
> I have written a simple app using ASP and PERL that will move the > quarantined file from the virus directory back to the spool for delivery. It > requires IIS to run on the same box as Imail, I run gateway servers so it is > a bit easier for me. > > I include the spool name and a link to the gateway server that held the file > in the BanNotify message, the user copies the file name and pastes it to > text box on the ASP page, clicking submit sends it to the PERL script which > moves the file back to the spool. I would be interested. However, I would like to see 1 extra step. They would be taken to a page that would explain the possible problems that could happen should they run a malicious file and have to enter their name and e-mail address to be recoreded and hit an accept button before being taken to the page where they can then paste in the file name to retrieve. John Tolmachoff Engineer/Consultant/Owner eServices For You --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] Notification for forwarded messages
We do this as well using Vbscript only. It does exactly what you do.
Anytime a virus is quarantined an email with a link to the file is sent to
the recepient with a warning of the dangers involved in retrieving the
files. We then delete everything over 5 days old to avoid getting too many
files in the virus dir.
We also require IIS to be running. It was written by an ISP that uses it on
his shared IMAIL server. He deletes them in 2 days.
=
You add this to the recip.eml
=
If you would like a copy of the infected email please follow the link below
AT YOUR OWN RISK!!!
http://serverwithvirus.com:port/declude.asp?msgid=%QUEUENAME%
REMEMBER IT IS AN INFECTED EMAIL. The email will be deleted in 5 days.
The declude.asp file
<[EMAIL PROTECTED]>
<%
var virusdir="c:\\imail\\spool\\virus\\";
var spooldir="c:\\imail\\spool\\";
var file=""+Request.QueryString("msgid");
file=file.substr(1);
fso = new ActiveXObject ("Scripting.FileSystemObject");
if (fso.FileExists(virusdir+"D"+file))
{
fso.MoveFile(virusdir+"D"+file, spooldir+"D"+file);
fso.MoveFile(virusdir+"Q"+file, spooldir+"Q"+file);
Response.Write("Please check your e-mail in a few minutes for the virus
infected message you requested."); } %>
Very simple as well.
Doug
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Rick Davidson
Sent: Friday, May 28, 2004 11:01 AM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.Virus] Notification for forwarded messages
I have written a simple app using ASP and PERL that will move the
quarantined file from the virus directory back to the spool for delivery. It
requires IIS to run on the same box as Imail, I run gateway servers so it is
a bit easier for me.
I include the spool name and a link to the gateway server that held the file
in the BanNotify message, the user copies the file name and pastes it to
text box on the ASP page, clicking submit sends it to the PERL script which
moves the file back to the spool.
I then intercept all notifications for banned files that I dont want them
retreiving such as mpegs and mp3s
Works great
I dont mind sharing the code if anyone wants it
Rick Davidson
National Systems Manager
North American Title Group
-
- Original Message -
From: "Hermann Strassner" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Friday, May 28, 2004 6:39 AM
Subject: [Declude.Virus] Notification for forwarded messages
Hello!
We block ZIPs and some executable extensions and want to leave it this
way. Because some folks need to send them, we have to check the
quarantined files (for viruses) and forward the mails without viruses
manually. Is there a way to inform the user that his mail is now
forwarded?
Alternatively, is it possible for the user to answer to the automatic
generated mail and forward the mail by himself? Is it possible somehow?
I think of it as follows: User sends email with ZIP, gets a
notification, answers to the notification with YES or something like
that, Declude sees it and forwards this email. I think this is enough to
make sure the user sends the email intentionally.
Hermann
---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]
---
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".The archives can be found
at http://www.mail-archive.com.
---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]
---
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".The archives can be found
at http://www.mail-archive.com.
---
[This E-mail scanned for viruses by Declude Virus]
---
[This E-mail scanned for viruses by Declude Virus]
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".The archives can be found
at http://www.mail-archive.com.
Re: [Declude.Virus] Notification for forwarded messages
I have written a simple app using ASP and PERL that will move the quarantined file from the virus directory back to the spool for delivery. It requires IIS to run on the same box as Imail, I run gateway servers so it is a bit easier for me. I include the spool name and a link to the gateway server that held the file in the BanNotify message, the user copies the file name and pastes it to text box on the ASP page, clicking submit sends it to the PERL script which moves the file back to the spool. I then intercept all notifications for banned files that I dont want them retreiving such as mpegs and mp3s Works great I dont mind sharing the code if anyone wants it Rick Davidson National Systems Manager North American Title Group - - Original Message - From: "Hermann Strassner" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Friday, May 28, 2004 6:39 AM Subject: [Declude.Virus] Notification for forwarded messages Hello! We block ZIPs and some executable extensions and want to leave it this way. Because some folks need to send them, we have to check the quarantined files (for viruses) and forward the mails without viruses manually. Is there a way to inform the user that his mail is now forwarded? Alternatively, is it possible for the user to answer to the automatic generated mail and forward the mail by himself? Is it possible somehow? I think of it as follows: User sends email with ZIP, gets a notification, answers to the notification with YES or something like that, Declude sees it and forwards this email. I think this is enough to make sure the user sends the email intentionally. Hermann --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
[Declude.Virus] Notification for forwarded messages
Hello! We block ZIPs and some executable extensions and want to leave it this way. Because some folks need to send them, we have to check the quarantined files (for viruses) and forward the mails without viruses manually. Is there a way to inform the user that his mail is now forwarded? Alternatively, is it possible for the user to answer to the automatic generated mail and forward the mail by himself? Is it possible somehow? I think of it as follows: User sends email with ZIP, gets a notification, answers to the notification with YES or something like that, Declude sees it and forwards this email. I think this is enough to make sure the user sends the email intentionally. Hermann --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
