RE: [Declude.Virus] BANEXT to delete all .pif?

2003-08-20 Thread R. Scott Perry

I thought BANEXT worked before the scanner?
Both are done on all E-mail, and if a virus is found, it takes priority 
over the banned file extension.

   -Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers.
Declude Virus: Catches known viruses and is the leader in mailserver 
vulnerability detection.
Find out what you have been missing: Ask for a free 30-day evaluation.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".The archives can be found
at http://www.mail-archive.com.


RE: [Declude.Virus] BANEXT to delete all .pif?

2003-08-20 Thread Marc Catuogno
I just ran a manual scan on the spool virus directory with F-protect and it
identified all the held viruses as [EMAIL PROTECTED] - BUT I did run an update
immediately before that even though I ran it this morning.

Marc

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of R. Scott Perry
Sent: Wednesday, August 20, 2003 04:03 PM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.Virus] BANEXT to delete all .pif?



>Just like everyone else, we are getting hammered by Sobig.F.  Declude seems
>to be catching and holding the virus e-mails with the attachments because
of
>the BANEXT option.  The potential exists to overload our hard drive. There
>were over 3,000 held messages today (that is about 2x what we would
normally
>do in a day)and I'm worried that with some minor modification some idiot
>could make this send out a larger file. Is anyone else setting to
>Deletevirus to "on" to address this and will that cause the held messages
to
>be deleted for BANEXT?

No, there isn't.

However, if the E-mail is caught due to a banned file extension, that means
that the virus scanner is not catching it, which is normally a serious
problem.

-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers.
Declude Virus: Catches known viruses and is the leader in mailserver
vulnerability detection.
Find out what you have been missing: Ask for a free 30-day evaluation.

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".The archives can be found
at http://www.mail-archive.com.
---
[This E-mail scanned for viruses by Declude Virus]


---
[This E-mail scanned for viruses by Declude Virus]

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".The archives can be found
at http://www.mail-archive.com.


RE: [Declude.Virus] BANEXT to delete all .pif?

2003-08-20 Thread Marc Catuogno
I thought BANEXT worked before the scanner?  DAMN... maybe my f-protect.exe
is old and not catching viruses?



-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of R. Scott Perry
Sent: Wednesday, August 20, 2003 04:03 PM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.Virus] BANEXT to delete all .pif?



>Just like everyone else, we are getting hammered by Sobig.F.  Declude seems
>to be catching and holding the virus e-mails with the attachments because
of
>the BANEXT option.  The potential exists to overload our hard drive. There
>were over 3,000 held messages today (that is about 2x what we would
normally
>do in a day)and I'm worried that with some minor modification some idiot
>could make this send out a larger file. Is anyone else setting to
>Deletevirus to "on" to address this and will that cause the held messages
to
>be deleted for BANEXT?

No, there isn't.

However, if the E-mail is caught due to a banned file extension, that means
that the virus scanner is not catching it, which is normally a serious
problem.

-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers.
Declude Virus: Catches known viruses and is the leader in mailserver
vulnerability detection.
Find out what you have been missing: Ask for a free 30-day evaluation.

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".The archives can be found
at http://www.mail-archive.com.
---
[This E-mail scanned for viruses by Declude Virus]


---
[This E-mail scanned for viruses by Declude Virus]

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".The archives can be found
at http://www.mail-archive.com.


Re: [Declude.Virus] BANEXT to delete all .pif?

2003-08-20 Thread R. Scott Perry

Just like everyone else, we are getting hammered by Sobig.F.  Declude seems
to be catching and holding the virus e-mails with the attachments because of
the BANEXT option.  The potential exists to overload our hard drive. There
were over 3,000 held messages today (that is about 2x what we would normally
do in a day)and I'm worried that with some minor modification some idiot
could make this send out a larger file. Is anyone else setting to
Deletevirus to "on" to address this and will that cause the held messages to
be deleted for BANEXT?
No, there isn't.

However, if the E-mail is caught due to a banned file extension, that means 
that the virus scanner is not catching it, which is normally a serious problem.

   -Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers.
Declude Virus: Catches known viruses and is the leader in mailserver 
vulnerability detection.
Find out what you have been missing: Ask for a free 30-day evaluation.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".The archives can be found
at http://www.mail-archive.com.


[Declude.Virus] BANEXT to delete all .pif?

2003-08-20 Thread Marc Catuogno
Please excuse this if it has already been answered-

Just like everyone else, we are getting hammered by Sobig.F.  Declude seems
to be catching and holding the virus e-mails with the attachments because of
the BANEXT option.  The potential exists to overload our hard drive. There
were over 3,000 held messages today (that is about 2x what we would normally
do in a day)and I'm worried that with some minor modification some idiot
could make this send out a larger file. Is anyone else setting to
Deletevirus to "on" to address this and will that cause the held messages to
be deleted for BANEXT?

Thanks - Marc

---
[This E-mail scanned for viruses by Declude Virus]

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".The archives can be found
at http://www.mail-archive.com.