[Declude.Virus] Allowing .zip for single domain

2005-05-24 Thread Don Wolff
I have Declude banning all zip exts. I am wondering if it is possible to
allow zip exts for a particular domain, or if that is not possible allow a
particular user to receive .zips. I don't want to remove the ban on zip ext
for the entire server, just the particular domain or for the single user.

Would rather not do either, but need to know if it can be done at all.
Thanks!

Regards,

-Don

Do not meddle in the affairs of dragons, for you are crunchy and good with
ketchup.
=======
Don Wolff- Technology Coordinator
Phoenix-Talent School District #4
mailto:[EMAIL PROTECTED]
Office- 541-535-0200
Mobile- 541-621-4717
FAX-541-512-0179

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".The archives can be found
at http://www.mail-archive.com.


Re: [Declude.Virus] excahnge2aliases

2005-05-23 Thread Don Wolff
If I remember correctly on 5/23/05 5:04 PM Sanford Whiteman wrote:

> You know, that's a really good point. "Search without sigs" would be a
> good feature. Try these threads:
> 
> http://www.mail-archive.com/imail_forum@list.ipswitch.com/msg85346.html
> 
> http://www.mail-archive.com/imail_forum@list.ipswitch.com/msg98170.html
> 
> 
> It's  not  that  I  don't  want  to  help, but I want to make sure any
> existing info is. . . reinvested.

Thanks Sandy, I too would rather not have to bang all the people when this
has been covered.

Thanks for the links!

Regards,

-Don

There are 10 types of people in this world. Those who understand binary, and
those who don't.
===
Don Wolff- Technology Coordinator
Phoenix-Talent School District #4
mailto:[EMAIL PROTECTED]
Office- 541-535-0200
Mobile- 541-621-4717
FAX-541-512-0179

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".The archives can be found
at http://www.mail-archive.com.


[Declude.Virus] excahnge2aliases

2005-05-23 Thread Don Wolff
I am currently using my Imail installation as a dumb store-and-forward
server to take advantage of Declude Spam and Virus scrubbing and then
forward to our Exchange server.

When I first implemented this last summer I took the easy way out and simply
modified the Host file on the Imail server to point mail.domain.com to my
exchange server ip.

What I would now like to do is implement Sandy's exchange2aliases script to
help prevent dictionary attacks as well as cut out a lot of the mail sent to
users no longer with our organization.

Not being a programmer at all I am having a difficult time in parsing the
script into a plan of implementation for myself. Nor did I get much more
information to help me understand how to implement it from running the
cscript exchange2aliases.vbs /? command at a prompt.

Is there anyone out there that has implemented this that can help shed some
light on how I might go about making the change? A whitepaper or anything
else?

A search of the archives is difficult as any search for exchange2aliases
brings up all of Sandy's posts, which are prolific.

Anyway, if you can help, please do let me know!

Regards,

-Don

"It's what you learn after you know it all that counts." - Earl Weaver
===========
Don Wolff- Technology Coordinator
Phoenix-Talent School District #4
mailto:[EMAIL PROTECTED]
Office- 541-535-0200
Mobile- 541-621-4717
FAX-541-512-0179

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".The archives can be found
at http://www.mail-archive.com.


[Declude.Virus] Did Something Change?

2005-01-19 Thread Don Wolff
Is it just me, or has there been a pretty substantial change in blitzedall,
DSBL, ORDB, and SBL. Today for some reason I am seeing huge amount of
legitimate email caught by Declude based upon warnings from these dbs? Did I
miss something?


Regards,

-Don

Destiny: a series of unrelated coincidences, rationalized by the affected.
===
Don Wolff- Technology Coordinator
Phoenix-Talent School District #4
mailto:[EMAIL PROTECTED]
Office- 541-535-0200
Mobile- 541-621-4717
FAX-541-512-0179

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".The archives can be found
at http://www.mail-archive.com.


Re: [Declude.Virus] Moving IMail and Declude

2004-08-18 Thread Don Wolff

Just figured this out by looking in the log files (sorry, I know it should
be the first place I go, but usually my last attempt). It's telling me the
activation code is invalid.

Thanks for the help. Sorry I was stupid and didn't check the logs first
before crying for help!


Regards,

-Don

 Age doesn't always bring wisdom -- Sometimes age comes alone.
=======
Don Wolff- Technology Coordinator
Phoenix-Talent School District #4
mailto:[EMAIL PROTECTED]
Office- 541-535-0200
Mobile- 541-621-4717
FAX-541-535-7552
 

> From: "IS - Systems Eng. \(Karl Drugge\)" <[EMAIL PROTECTED]>
> Reply-To: [EMAIL PROTECTED]
> Date: Wed, 18 Aug 2004 14:31:17 -0400
> To: <[EMAIL PROTECTED]>
> Subject: RE: [Declude.Virus] Moving IMail and Declude
> 
> I did this a few months ago..
> 
> EVERYTHING has to match; IP, machine name and IMAIL server name ( under
> the Imail server properties, in Imail ). If they don't, it won't work.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".The archives can be found
at http://www.mail-archive.com.


Re: [Declude.Virus] Banned extension - MDB

2003-02-24 Thread Don Wolff
If I remember correctly on 2/24/03 7:23 AM Rodney Bertsch wrote:

> But they wouldn't self execute would they?  You would still have to open the
> Access DB first before there were problems.  Putting the ZIP restriction in
> there wouldn't really protect any farther, just one more step to get to the
> bad macros.
> 
> Or am I missing something here?  Can the MDB file be made to execute
> automatically just by receiving the e-mail?
> 
> What about Word and Excel files?  They can also contain macros, can they be
> made to execute automatically just by opening the e-mail?

If they don't want to zip it, just have them change the extension. Say from
.mdb to .mdz.

Regards,

-Don

The little time you save hastily finishing the project will be spent redoing
it properly...
===
Don Wolff- Technology Coordinator
Phoenix-Talent School District #4
mailto:[EMAIL PROTECTED]
Office- 541-535-0200
Mobile- 541-621-4717
FAX-541-535-7552

---
[This E-mail scanned for viruses by Declude Virus]

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".The archives can be found
at http://www.mail-archive.com.


Re: [Declude.Virus] Favored Anti-Virus for Declude?

2003-02-10 Thread Don Wolff
If I remember correctly on 2/10/03 3:15 PM bralynn wrote:

> Is there a favored anti-virus that works with Declude?
> 
> We are looking for a stable, affordable and proven to work well with IMail
> 7.13, Declude Virus, Junkmail, Hijack running on Windows XP and/or 2000
> Server.
> 
> Thank you for any suggestions.

I swear by f-prot! Cheap and reliable! <http://www.f-prot.com>

Regards,

-Don

"Man may penetrate the outer reaches of the universe, he may solve the very
secret of eternity itself, but for me, the ultimate human experience is to
witness the flawless execution of a hit-and-run." - Branch Rickey
=======
Don Wolff- Technology Coordinator
Phoenix-Talent School District #4
mailto:[EMAIL PROTECTED]
Office- 541-535-0200
Mobile- 541-621-4717
FAX-541-535-7552

---
[This E-mail scanned for viruses by Declude Virus]

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".The archives can be found
at http://www.mail-archive.com.



Re: [Declude.Virus] Whitelist single IP

2003-01-06 Thread Don Wolff
If I remember correctly on 1/6/03 8:54 AM Jeff Maze - Hostmaster wrote:

> I was wondering how exactly I can whitelist a single IP address.  I
> tried adding it to the conf file, but it not working.  I'm running declude
> v1.65

How did you add it? In the Global.cfg file I have successfully added several
Ips to be ignored. Syntax is:

whitelist   IP  123.456.789

Regards,

-Don

 Affirmation of Arrogance -- "There is no I in team... but there is in WIN,
CHAMPION, and RING"
=======
Don Wolff- Technology Coordinator
Phoenix-Talent School District #4
mailto:[EMAIL PROTECTED]
Office- 541-535-0200
Mobile- 541-621-4717
FAX-541-535-7552

---
[This E-mail scanned for viruses by Declude Virus]

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".The archives can be found
at http://www.mail-archive.com.



Re: [Declude.Virus] Thanks.

2002-08-20 Thread Don Wolff

If I remember correctly on 8/20/02 3:05 PM Full Name wrote:

> Thank you for pointing me to www.f-prot.com. Please excuse my
> ignorance but which one has the command line scanner? DOS or
> Windows.
Both have the command line scanner. The full Windows version will make it
easier for doing dynamic updates of virus definitions, though the other can
be scripted to get updates automatically as well.

I use the Windows version on my server and it works very well.

Regards,

-Don

There are no shortcuts in life -- just efficiencies or the lack thereof...
=======
Don Wolff- Technology Coordinator
Phoenix-Talent School District #4
mailto:[EMAIL PROTECTED]
Office- 541-535-0200
Mobile- 541-621-4717
FAX-541-535-7552

---
[This E-mail scanned for viruses by Declude Virus]

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".The archives can be found
at http://www.mail-archive.com.



[Declude.Virus] Weird Virus Catch

2002-05-13 Thread Don Wolff

Wondering if it is possible to set Declude standard to allow emails from a
specific IP or email address to pass without catching and quarantining
messages.

The situation is this. We are a school district and must filter our web
services. When a page is filtered it brings them to a form on our proxy
server to allow users to request a review of the site to possibly remove it
from the filter.

So far all of the requests I have submitted in testing this page, which is
just a cgi form that uses sendmail on the Linux box to send the request to
me, have been flagged, caught and killed by Declude as containing the
Outlook 'Blank Folding' Vulnerability. Since this is coming from a known
clean box, and is catching all attempts I am thinking there may be something
in the form that is causing the emails to appear with this vulnerability.
But in the mean time, I need to get those past Declude.

Any thoughts?

 

Regards,

-Don

Where you are and where you're going are more important than where you've
been...
=======
Don Wolff- Technology Coordinator
Phoenix-Talent School District #4
mailto:[EMAIL PROTECTED]
Office- 541-535-0200
Mobile- 541-621-4717
FAX-541-535-7552

---
[This E-mail scanned for viruses by Declude Virus]

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .



MISSING_REVERSE_DNS:RE: [Declude.Virus] F-Prot error?

2002-02-02 Thread Don Wolff

Not trying to be too big of a butt-head, but it is extremely poor etiquette
to post an attachment to a list. Next time, upload the pic. to a web site
and provide us the url please.


Regards,

-Don

 Crime doesn't pay...does that mean that my job is a crime?
-------
Don Wolff, Technology Coordinator
Phoenix-Talent School District http://www.phoenix.12.or.us
mailto:[EMAIL PROTECTED]
http://help.phoenix.k12.or.us
541.535.0200- Office
541.621.4717- Mobile
541.535.7552- FAX


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Scott MacLean
Sent: Saturday, February 02, 2002 9:40 AM
To: [EMAIL PROTECTED]
Subject: [Declude.Virus] F-Prot error?


Since installing Declude three days ago, I have twice found my server
sitting with the attached message box showing on the desktop. The only
Symantec product running on the server is PCAnywhere. Anyone have any clues?




---
[This E-mail scanned for viruses by Declude Virus]

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .