Re: [Declude.Virus] Mail Template
You can obviously customize these to meet your needs. We use the following for the [EMAIL PROTECTED] Declude Virus caught a virus: on: %DATE% going: %INOROUT% subject: "%SUBJECT%" from: %MAILFROM% to: %ALLRECIPS% # of recipients: %NRECIPS% hostname recipient: %RECIPHOST% remote host: %REMOTEHOST% sender host: %SENDERHOST% virusfile: %VIRUSFILE% virusname: %VIRUSNAME% The spool file name is %QUEUENAME%. -- Jack Taugher, CCNA, MCSE, MCP+I, CNA Information Systems Manager Alliance for Children and Families, Inc. Visit us online at http://www.alliance1.org/ -- Original Message -- From: "Bruno Carlos" <[EMAIL PROTECTED]> Reply-To: [EMAIL PROTECTED] Date: Fri, 27 Jul 2001 16:14:07 +0100 >This sounds silly but could anyone provide a more complete mail template other than the standard one that comes with Declude? > >I find it very basic, and I noticed the other day that someone had a really nice mail template but can't find that mail. > >By default Declude template is like this: > >The Declude Virus software on %LOCALHOST% has reported that you sent >a virus with the subject "%SUBJECT%" to: >%ALLRECIPS%. >The E-mail containing the virus has been quarantined to prevent further damage. > >Bruno Carlos >site: www.flesk.com >mail:[EMAIL PROTECTED] >tel:+351 289 805025 >fax:+351 289 805022 > > > This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
ORBL:Re: [Declude.Virus] Internal email sending virus'
So are you saying that if I write an email with an attachment in a webmail environment that Declude is-not/can-not scan those attachments for viri? - Original Message - From: "R. Scott Perry" <[EMAIL PROTECTED]> > It will work on all E-mail, with the exception of outgoing web messaging > E-mails (the E-mails themselves are safe, just any attachments that users > upload can not be scanned). This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
Re: [Declude.Virus] Declude Virus v1.24 (beta)
Does anything happen to these BANNED files? And are any alerts to anyone made? Nice feature. Thank you. Rules in IMAIL SUCK! - Original Message - > o You can now ban certain file extensions, by adding "BANEXT exe" (for .exe > files) to the virus.cfg file. This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
ORBL:Re: BADWHOIS:Re: [Declude.Virus] using rules vs Declude
I inquired a few weeks back about this, and suggested that Scott come up with a new product called "Declude Rules". ;-) Too bad Windows doesn't come with QBasic anymore -- I used to write in that little language and have it rip and parse apart text files into data fields. Hmmm. >I can't think of any way of doing that. IMail's rules run during the >delivery procedure (the IMail "SMTP" process as opposed to the "SMTPD" >process that receives them), and Declude always gets called before that. > -Scott This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
Re: MISSING_REVERSE_DNS:RE: [Declude.Virus] two scanner Support
Ditto. - Original Message - From: "John Shacklett" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Thursday, October 04, 2001 8:39 AM Subject: RE: MISSING_REVERSE_DNS:RE: [Declude.Virus] two scanner Support > another request This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
Re: [Declude.Virus] BANnotify
This works for us. It gets sent to the original sender, the intended recipient and to me. - Original Message - > >>>2. I would like to Bcc my self as postmaster to know when some receives a > >>>banned email and send one to the sender. Can this be done? > >> > >>No, that can not be done; only one E-mail notification can go out > >>(although you can choose who it goes to). > > > >Can you put more than one recipient separated by a comma, on the "to" line? > > No, that isn't possible, sorry. > -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
[Declude.Virus] SMTP AUTH - Imail v6.06
(IMail v6.06 - SMTP AUTH) We need to enable SMTP AUTH for all of our clients -- we've found some device/person (IP) on the outside of our network spoofing emails to lists by the few users who are authorized list posters. In order to do this, is it best that we just check "No Mail Relay" on the server and make all of our users go through the few steps to do SMTP AUTH? --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
Re: [Declude.Virus] SMTP AUTH - Imail v6.06
- Original Message - > >(IMail v6.06 - SMTP AUTH) > > > >We need to enable SMTP AUTH for all of our clients -- we've found some > >device/person (IP) on the outside of our network spoofing emails to lists by > >the few users who are authorized list posters. > > > >In order to do this, is it best that we just check "No Mail Relay" on the > >server and make all of our users go through the few steps to do SMTP AUTH? > > However, I don't believe that will prevent people from sending mail to the > list using forged return addresses, since SMTP AUTH only applies to > outgoing (relayed) E-mail. > -Scott In reply, doesn't IMail (SMTP AUTH) not allow email to be relayed unless a password is supplied during login? If that is true -- then how could someone forge a return address without having a password to send mail? --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
Re: [Declude.Virus] Sender.eml
01/28/2003 07:37:19 Q8789130 (Error 5 at 4154a6 v1.66) 01/28/2003 07:37:19 Q8789130 (log part 2 saved as C:\declude.gp2) 01/28/2003 07:37:19 Q8789130 (log part 1 saved as C:\declude.gp1) What do these mean? We get them ALL the time now. It appears after installing this version of the Declude product that our email system has slowed down 20x. At least it appears that this was the only thing installed since the time things have slowed down. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
[Declude.Virus] Error5 at 4154a6 v1.66
01/28/2003 07:37:19 Q8789130 (Error 5 at 4154a6 v1.66) 01/28/2003 07:37:19 Q8789130 (log part 2 saved as C:\declude.gp2) 01/28/2003 07:37:19 Q8789130 (log part 1 saved as C:\declude.gp1) What do these mean? We get them ALL the time now. It appears after installing this version of the Declude product that our email system has slowed down 20x. At least it appears that this was the only thing installed since the time things have slowed down. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
Re: [Declude.Virus] Error5 at 4154a6 v1.66
Thanks. It took care of the problem. (Do you need my .gp_ files anyways, or not?) - Original Message - From: "R. Scott Perry" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Wednesday, January 29, 2003 8:59 AM Subject: Re: [Declude.Virus] Error5 at 4154a6 v1.66 > > > 01/28/2003 07:37:19 Q8789130 (Error 5 at 4154a6 v1.66) > >01/28/2003 07:37:19 Q8789130 (log part 2 saved as C:\declude.gp2) > >01/28/2003 07:37:19 Q8789130 (log part 1 saved as C:\declude.gp1) > > > > What do these mean? We get them ALL the time now. > > If you upgrade to the latest interim release ( > http://www.declude.com/release/166i/declude.exe ), it will take care of > that problem. > -Scott > > --- > [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] > > --- > This E-mail came from the Declude.Virus mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.Virus".The archives can be found > at http://www.mail-archive.com. > --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
[Declude.Virus] Recommendation: STRIPATTACHMENT
Is there any way in which Declude Virus could have an option called "STRIPATTACHMENT" which would provide cross functionality between an virus infected email and a banned attachment? That is that, while we BAN attachments of MP3, PIF, SCR, etc .. we would like the message to be able to go through on certain extensions. Namely EXE, so that at least the sender/recipient can make an alternate means for sending the item. While a message is sent with BAN to various identified parties, they often don't understand what to do. If the STRIPATTACHMENT feature were possible, then it would be nice for it to strip the attachment off, and place a header in the message saying that "The attachment(s) which originally were attached to this message are banned at the mail-server. However the text of the message follows:". --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
Re: [Declude.Virus] Feature Request for Banned File Extensions
The point is, there are times as support for a national software program for non-profit organizations, that we need to send just a DLL to a client who has deleted it. They aren't smart enough to use WINZIP. - Original Message - From: "Chris Hunt" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Tuesday, February 18, 2003 9:46 AM Subject: Re: [Declude.Virus] Feature Request for Banned File Extensions > Rick, I understand your concern but with all the viruses out there the > banext is an extra layer of protection. You could just remove the lines in > the virus.cfg and just trust Declude and your AV program to catch the bad one. > > Would it not save a ton-o-bandwidth if the poster of a mailing list just > put the file on some FTP/WWW site and include the link? --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
[Declude.Virus] Sophos - Not detecting?
Does Sophos's CLI work well with Declude? The reason I ask is it only seems like Declude/Sophos' interaction is only picking up these types of viruses: --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
[Declude.Virus] Sophos - Declude? Work well?
Does Sophos' CLI work well with Declude/Imail? I ask because I don't see anything but the following come through my personal mail server: 09/11/2003 21:52:15 Q34df003e009edb62 Outlook 'CR' vulnerability [MIME-Versi] in line 8 09/11/2003 21:52:17 Q34df003e009edb62 File(s) are INFECTED [[Outlook 'CR' Vulnerability]: 0] 09/11/2003 21:52:17 Q34df003e009edb62 Scanned: CONTAINS A VIRUS [MIME: 1 1656] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
Re: [Declude.Virus] McAfee and /clean - does EE v7.1 work?
> >Is the /clean switch in McAfee AV (Enterprise Edition 7.1) supported > >within Declude? Does the McAfee AV Enterprise Edition v7.1 work just as the previous with Declude, or should we replace it with the prior installation? --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
