[Declude.Virus] rather delete than hold messages containing viruses
I like getting to virus notification messages and so do our users. What I'm not as thrilled about is having to delete a whole pile of quarantined messages. Is there some setting I can use to just delete all of these? -- Susan Duncan ([EMAIL PROTECTED]) TEL:(613) 231-SIRC x225 Director of Computer Operations, SIRC FAX:(613) 231-3739 http://www.sportquest.com/ http://www.canadiansport.com/ --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
Re: [Declude.Virus] False positive??
Since we do some programming in Cold Fusion, I took a look through the Macromedia site. Mail sent via Cold Fusion is sent via a CFMAIL tag and is not really under the programmers control, at least not to the level of granularity that would be required to break something. There appeared to be a problem with the older versions of CF, but the tag seems to indicate the MX version which is the newest version. http://www.macromedia.com/support/coldfusion/ts/documents/tn18212.htm R. Scott Perry wrote: I have been contacted by one of our users who had a message blocked by Declude Virus and was sent a warning about a Outlook vulnerability contained in the email. The problem is that it was a web server generated email message and not sent from an Outlook/Outlook Express client. A vulnerability with a name referring to a product refers to a vulnerability *in* that product, not necessarily generated by it (for example, a hacker would likely take advantage of an IIS vulnerability using a special tool, not IIS itself). This does confuse a lot of people. [Outlook 'MIME segment in MIME Preamble' Vulnerability] You can find out more about this vulnerability at http://www.declude.com/Virus/vulnerability.htm . Most likely, the company sending the E-mail hired a web developer instead of a real computer programmer to write a program to send out the E-mail, and the web developer tried his best to send the E-mail, but didn't do it properly. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you have been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus] -- Susan Duncan ([EMAIL PROTECTED]) TEL:(613) 231-SIRC x225 IT Director, SIRC FAX:(613) 231-3739 http://www.sportquest.com/ http://www.canadiansport.com/ --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
[Declude.Virus] not catching W32.Sober.O@mm!enc
Not sure if I should be posting this here or sending something to f-prot. We're running Declude Virus with F-Prot and some of the email messages getting through to the client are coming up with [EMAIL PROTECTED] getting caught by Symantec. I've been getting these since late last week and I've updated f-prot. Am I just not configured properly or is f-prot just that far behind in updates? Susan Duncan Web/Communications Officer / Agent des Communications/web Union of Taxation Employees / Syndicat des employées de l'Impôt Tel: 613-235-6704 ext 240 Fax: 613-234-7290 e-mail: [EMAIL PROTECTED] http://www.ute-sei.org/ --- [This E-mail scanned for viruses by Declude Virus] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] not catching W32.Sober.O@mm!enc
I went through the logs, and yes I was running another on access scanner. I had disabled f-prot's on access scanner but forgot that I was also running Norton on that machine. I've disabled Norton but I was wondering if I could re-enable Norton but just not have it scan the imail directory? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Nick Sent: May 9, 2005 9:30 AM To: Declude.Virus@declude.com Subject: Re: [Declude.Virus] not catching [EMAIL PROTECTED] On 9 May 2005 at 9:27, Susan Duncan wrote: Hi Susan - 2 things - What do your logs show - eg Is Declude scanning the suspect email? 2- If it is I bet Symantec is giving a false positive - non virulent positive. -Nick > Not sure if I should be posting this here or sending something to > f-prot. We're running Declude Virus with F-Prot and some of the email > messages getting through to the client are coming up with > [EMAIL PROTECTED] getting caught by Symantec. > > I've been getting these since late last week and I've updated f-prot. > Am I just not configured properly or is f-prot just that far behind in > updates? > > > Susan Duncan > Web/Communications Officer / Agent des Communications/web > Union of Taxation Employees / Syndicat des employées de l'Impôt > Tel: 613-235-6704 ext 240 > Fax: 613-234-7290 > e-mail: [EMAIL PROTECTED] > http://www.ute-sei.org/ > > > > --- > [This E-mail scanned for viruses by Declude Virus] > > --- > This E-mail came from the Declude.Virus mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.Virus".The archives can be found > at http://www.mail-archive.com. > --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail scanned for viruses by Declude Virus] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
[Declude.Virus] blocking by IP address
I have the standard version of Declude virus and spam. I am receiving viruses every day from a particular IP address. I've contacted the admin for that IP address to no avail. I would just like to block everything from that IP so that we aren't getting messages about all the viruses we're blocking from that address. Is there an easy way to do that? Susan Duncan Web/Communications Officer / Agent des Communications/web Union of Taxation Employees / Syndicat des employées de l'Impôt Tel: 613-235-6704 ext 240 Fax: 613-234-7290 e-mail: [EMAIL PROTECTED] http://www.ute-sei.org/ --- [This E-mail scanned for viruses by Declude Virus] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] blocking by IP address
Thanks. I'd forgotten about that option. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darrell ([EMAIL PROTECTED]) Sent: June 20, 2005 10:36 AM To: Declude.Virus@declude.com Subject: Re: [Declude.Virus] blocking by IP address If you are using Imail just add it into the SMTP Access Control List. This will block them from connecting to them. Darrell -- DLAnalyzer - Comprehensive reporting for Declude Junkmail and SPAM. Try it today http://www.dlanalyzer.com Susan Duncan writes: > I have the standard version of Declude virus and spam. I am receiving > viruses every day from a particular IP address. I've contacted the admin > for that IP address to no avail. I would just like to block everything from > that IP so that we aren't getting messages about all the viruses we're > blocking from that address. > > Is there an easy way to do that? > --- [This E-mail scanned for viruses by Declude Virus] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
[Declude.Virus] OT: Declude confirm
Title: U can check out but you can never leave I had to stop using declude confirm because no one could subscribe or unsubscribe anymore. It was fine until I bought Declude virus/spam. When I was running just the free declude confirm it worked. Susan Duncan Web/Communications Officer / Agent des Communications/web Union of Taxation Employees / Syndicat des employées de l'Impôt Tel: 613-235-6704 ext 240 Fax: 613-234-7290 e-mail: [EMAIL PROTECTED] http://www.ute-sei.org/ -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Grant Griffith Sent: July 5, 2005 9:34 AM To: Declude.Virus@declude.com Subject: RE: [Declude.Virus] U can check out but you can never leave This is a known issue of Declude Confirm, but they have not had time to fix it yet. Although I am thinking they thought they fixed it with the latest beta, but I have not verified that on my end yet. Might want to email support and see if they can get you unsubscribed. Thanks, Grant Griffith EI8HTLEGS, A Division of ETC (812)932-1000
