RE: [Declude.Virus] Slightly OT: Encrypting or Securing Email Content

2005-10-10 Thread John T \(Lists\)
FYI, I do not ban EZIP outright. What I do is BANEZIPEXTs which will ban an
EZIP file containing a file that is banned.

John T
eServices For You


> -Original Message-
> From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]
> On Behalf Of Kevin Rogers
> Sent: Monday, October 10, 2005 10:26 PM
> To: Declude.Virus@declude.com
> Subject: [Declude.Virus] Slightly OT: Encrypting or Securing Email Content
> 
> We're looking for a simple way to opportunistically allow our users to
> encrypt or password-protect certain emails and/or their attachments that
> contain sensitive data.  We're running Declude Pro and have banned EZIP
> extensions (the highly recommended suggestion from several people on
> this forum), so that kinda rules out PKZIP and any kind of ZIP program
> (because as soon as you password-protect a ZIP file, it becomes an EZIP
> file).  We looked at PGP, but it seems very complex and seems to require
> a hardware proxy in between our mail server and the Net.  Is there a
> simple and effective way to encrypt or password protect documents for
> email transmission that doesn't cause problems with Imail or Declude and
> doesn't require software to be installed on the recipient's end?
> 
> Thanks.
> 
> Kevin
> ---
> [This E-mail was scanned for viruses.]
> 
> ---
> This E-mail came from the Declude.Virus mailing list.  To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.Virus".The archives can be found
> at http://www.mail-archive.com.

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".The archives can be found
at http://www.mail-archive.com.


Re: [Declude.Virus] Slightly OT: Encrypting or Securing Email Content

2005-10-11 Thread Michael Thomas - Mathbox
Kevin,

I am licensed for Declude 3.x, but have not yet installed it. I am waiting
until I think the dust has settled. So, I am running Declude Version 1.82.
At version 1.82, Declude virus scanning was enabled or disabled at the email
account level or domain level. If enabled, the rule set was one set for ALL
enabled accounts. With  that said, here is how we handle that issue.

We have many medical clients that receive encrypted ZIP files from labs.
There are other cases, but that is the predominate one. For those customers,
we create a special recipient email account. In Declude, we disable virus
scanning for that email account. In the email account, I setup IMail filters
on the FROM address. If the message doesn't come from a desireable address,
it gets deleted. That makes the sending email address TRUSTED. Some labs
will send a key in the subject. In that case, we take advantage and filter
on the subject also.

Mike

- Original Message - 
From: "Kevin Rogers" <[EMAIL PROTECTED]>
To: 
Sent: Tuesday, October 11, 2005 1:26 AM
Subject: [Declude.Virus] Slightly OT: Encrypting or Securing Email Content


> We're looking for a simple way to opportunistically allow our users to
> encrypt or password-protect certain emails and/or their attachments that
> contain sensitive data.  We're running Declude Pro and have banned EZIP
> extensions (the highly recommended suggestion from several people on
> this forum), so that kinda rules out PKZIP and any kind of ZIP program
> (because as soon as you password-protect a ZIP file, it becomes an EZIP
> file).  We looked at PGP, but it seems very complex and seems to require
> a hardware proxy in between our mail server and the Net.  Is there a
> simple and effective way to encrypt or password protect documents for
> email transmission that doesn't cause problems with Imail or Declude and
> doesn't require software to be installed on the recipient's end?
>
> Thanks.
>
> Kevin
> ---
> [This E-mail was scanned for viruses.]
>
> ---
> This E-mail came from the Declude.Virus mailing list.  To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.Virus".The archives can be found
> at http://www.mail-archive.com.
>
>


---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".The archives can be found
at http://www.mail-archive.com.


Re: [Declude.Virus] Slightly OT: Encrypting or Securing Email Content

2005-10-11 Thread Michael Thomas - Mathbox
Kevin,

Also, for those one-time events, rename the ZIP file before attachement,
like MyEncrypted.Zip is renamed to MyEncrypted.Zip.Txt, with a message to
the recipient to rename the file.

Mike


- Original Message - 
From: "Kevin Rogers" <[EMAIL PROTECTED]>
To: 
Sent: Tuesday, October 11, 2005 1:26 AM
Subject: [Declude.Virus] Slightly OT: Encrypting or Securing Email Content


> We're looking for a simple way to opportunistically allow our users to
> encrypt or password-protect certain emails and/or their attachments that
> contain sensitive data.  We're running Declude Pro and have banned EZIP
> extensions (the highly recommended suggestion from several people on
> this forum), so that kinda rules out PKZIP and any kind of ZIP program
> (because as soon as you password-protect a ZIP file, it becomes an EZIP
> file).  We looked at PGP, but it seems very complex and seems to require
> a hardware proxy in between our mail server and the Net.  Is there a
> simple and effective way to encrypt or password protect documents for
> email transmission that doesn't cause problems with Imail or Declude and
> doesn't require software to be installed on the recipient's end?
>
> Thanks.
>
> Kevin
> ---
> [This E-mail was scanned for viruses.]
>
> ---
> This E-mail came from the Declude.Virus mailing list.  To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.Virus".The archives can be found
> at http://www.mail-archive.com.
>
>


---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".The archives can be found
at http://www.mail-archive.com.


Re: [Declude.Virus] Slightly OT: Encrypting or Securing Email Content

2005-10-11 Thread Kevin Rogers

But even in Declude's virus.cfg file it says

#
# The BANEXT EZIP line blocks all encrypted .ZIP and .RAR files, which 
is necessary
# to be fully protected against viruses (since it is impossible to 
detect a well-

# constructed virus within an encrypted .ZIP or .RAR file).
#

Should I ban EZIPs or not?  I always thought I had to.  It'd be nice to 
be able to allow them through since creating password-protected ZIP 
files is one of the easiest ways to add a decent amount of security to 
email attachments.


Kevin


John T (Lists) wrote:


FYI, I do not ban EZIP outright. What I do is BANEZIPEXTs which will ban an
EZIP file containing a file that is banned.

John T
eServices For You


 


-Original Message-
From: [EMAIL PROTECTED]
   


[mailto:[EMAIL PROTECTED]
 


On Behalf Of Kevin Rogers
Sent: Monday, October 10, 2005 10:26 PM
To: Declude.Virus@declude.com
Subject: [Declude.Virus] Slightly OT: Encrypting or Securing Email Content

We're looking for a simple way to opportunistically allow our users to
encrypt or password-protect certain emails and/or their attachments that
contain sensitive data.  We're running Declude Pro and have banned EZIP
extensions (the highly recommended suggestion from several people on
this forum), so that kinda rules out PKZIP and any kind of ZIP program
(because as soon as you password-protect a ZIP file, it becomes an EZIP
file).  We looked at PGP, but it seems very complex and seems to require
a hardware proxy in between our mail server and the Net.  Is there a
simple and effective way to encrypt or password protect documents for
email transmission that doesn't cause problems with Imail or Declude and
doesn't require software to be installed on the recipient's end?

Thanks.

Kevin
---
[This E-mail was scanned for viruses.]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".The archives can be found
at http://www.mail-archive.com.
   



---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".The archives can be found
at http://www.mail-archive.com.
---
[This E-mail was scanned for viruses.]



 


---
[This E-mail was scanned for viruses.]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".The archives can be found
at http://www.mail-archive.com.


Re: [Declude.Virus] Slightly OT: Encrypting or Securing Email Content

2005-10-11 Thread Darin Cox
If you have Declude Virus/EVA Pro you can switch to banning extensions
within zips.  With Standard, you may want to continue to ban encrypted zips.

In either case, you will probably want to send out notices for banned files,
notifying the intended recipient that a file sent to them was blocked.
Include a link in the notification for them to requeue the message if it was
legit and they want to receive it.  Scripts to requeue messages have been
posted to the list in the past, but they are very simple to create by just
moving the Q and D files back to the spool directory... possibly going as
far as launching the SMTP32 process to immediately send the message if you
don't want your user to wait for the next queue run.

Darin.


- Original Message - 
From: "Kevin Rogers" <[EMAIL PROTECTED]>
To: 
Sent: Tuesday, October 11, 2005 1:26 AM
Subject: [Declude.Virus] Slightly OT: Encrypting or Securing Email Content


We're looking for a simple way to opportunistically allow our users to
encrypt or password-protect certain emails and/or their attachments that
contain sensitive data.  We're running Declude Pro and have banned EZIP
extensions (the highly recommended suggestion from several people on
this forum), so that kinda rules out PKZIP and any kind of ZIP program
(because as soon as you password-protect a ZIP file, it becomes an EZIP
file).  We looked at PGP, but it seems very complex and seems to require
a hardware proxy in between our mail server and the Net.  Is there a
simple and effective way to encrypt or password protect documents for
email transmission that doesn't cause problems with Imail or Declude and
doesn't require software to be installed on the recipient's end?

Thanks.

Kevin
---
[This E-mail was scanned for viruses.]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".The archives can be found
at http://www.mail-archive.com.

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".The archives can be found
at http://www.mail-archive.com.


Re: [Declude.Virus] Slightly OT: Encrypting or Securing Email Content

2005-10-11 Thread Darrell \([EMAIL PROTECTED])
Kevin, 

I thought PGP had a desktop version that integrates directly with outlook? 


Darrell

Check out http://www.invariantsystems.com for utilities for Declude And 
Imail.  IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG 
Integration, and Log Parsers. 



Kevin Rogers writes: 

We're looking for a simple way to opportunistically allow our users to 
encrypt or password-protect certain emails and/or their attachments that 
contain sensitive data.  We're running Declude Pro and have banned EZIP 
extensions (the highly recommended suggestion from several people on this 
forum), so that kinda rules out PKZIP and any kind of ZIP program (because 
as soon as you password-protect a ZIP file, it becomes an EZIP file).  We 
looked at PGP, but it seems very complex and seems to require a hardware 
proxy in between our mail server and the Net.  Is there a simple and 
effective way to encrypt or password protect documents for email 
transmission that doesn't cause problems with Imail or Declude and doesn't 
require software to be installed on the recipient's end? 

Thanks. 


Kevin
---
[This E-mail was scanned for viruses.] 


---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".The archives can be found
at http://www.mail-archive.com.



---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".The archives can be found
at http://www.mail-archive.com.


Re: [Declude.Virus] Slightly OT: Encrypting or Securing Email Content

2005-10-11 Thread Kevin Rogers
So it's this forum's consensus that if I have PRO I should not block all 
EZIPs - I should just block the other extensions even if they are found 
within ZIP files?


I do send out notices when a file gets blocked, but I don't have a 
requeue script in place.  I'll search for one and see what I can do.  
Thanks.




Darin Cox wrote:


If you have Declude Virus/EVA Pro you can switch to banning extensions
within zips.  With Standard, you may want to continue to ban encrypted zips.

In either case, you will probably want to send out notices for banned files,
notifying the intended recipient that a file sent to them was blocked.
Include a link in the notification for them to requeue the message if it was
legit and they want to receive it.  Scripts to requeue messages have been
posted to the list in the past, but they are very simple to create by just
moving the Q and D files back to the spool directory... possibly going as
far as launching the SMTP32 process to immediately send the message if you
don't want your user to wait for the next queue run.

Darin.


- Original Message - 
From: "Kevin Rogers" <[EMAIL PROTECTED]>

To: 
Sent: Tuesday, October 11, 2005 1:26 AM
Subject: [Declude.Virus] Slightly OT: Encrypting or Securing Email Content


We're looking for a simple way to opportunistically allow our users to
encrypt or password-protect certain emails and/or their attachments that
contain sensitive data.  We're running Declude Pro and have banned EZIP
extensions (the highly recommended suggestion from several people on
this forum), so that kinda rules out PKZIP and any kind of ZIP program
(because as soon as you password-protect a ZIP file, it becomes an EZIP
file).  We looked at PGP, but it seems very complex and seems to require
a hardware proxy in between our mail server and the Net.  Is there a
simple and effective way to encrypt or password protect documents for
email transmission that doesn't cause problems with Imail or Declude and
doesn't require software to be installed on the recipient's end?

Thanks.

Kevin
---
[This E-mail was scanned for viruses.]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".The archives can be found
at http://www.mail-archive.com.

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".The archives can be found
at http://www.mail-archive.com.
---
[This E-mail was scanned for viruses.]



 


---
[This E-mail was scanned for viruses.]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".The archives can be found
at http://www.mail-archive.com.


Re: [Declude.Virus] Slightly OT: Encrypting or Securing Email Content

2005-10-11 Thread Scott Fisher

I block all encrypted zips based on the fact that I can't virus scan them.

But then again I'm slightly paranoid and should not be trusted with sharp 
objects.


- Original Message - 
From: "Kevin Rogers" <[EMAIL PROTECTED]>

To: 
Sent: Tuesday, October 11, 2005 3:08 PM
Subject: Re: [Declude.Virus] Slightly OT: Encrypting or Securing Email 
Content



So it's this forum's consensus that if I have PRO I should not block all 
EZIPs - I should just block the other extensions even if they are found 
within ZIP files?


I do send out notices when a file gets blocked, but I don't have a requeue 
script in place.  I'll search for one and see what I can do.  Thanks.




Darin Cox wrote:


If you have Declude Virus/EVA Pro you can switch to banning extensions
within zips.  With Standard, you may want to continue to ban encrypted 
zips.


In either case, you will probably want to send out notices for banned 
files,

notifying the intended recipient that a file sent to them was blocked.
Include a link in the notification for them to requeue the message if it 
was

legit and they want to receive it.  Scripts to requeue messages have been
posted to the list in the past, but they are very simple to create by just
moving the Q and D files back to the spool directory... possibly going as
far as launching the SMTP32 process to immediately send the message if you
don't want your user to wait for the next queue run.

Darin.


- Original Message - 
From: "Kevin Rogers" <[EMAIL PROTECTED]>

To: 
Sent: Tuesday, October 11, 2005 1:26 AM
Subject: [Declude.Virus] Slightly OT: Encrypting or Securing Email Content


We're looking for a simple way to opportunistically allow our users to
encrypt or password-protect certain emails and/or their attachments that
contain sensitive data.  We're running Declude Pro and have banned EZIP
extensions (the highly recommended suggestion from several people on
this forum), so that kinda rules out PKZIP and any kind of ZIP program
(because as soon as you password-protect a ZIP file, it becomes an EZIP
file).  We looked at PGP, but it seems very complex and seems to require
a hardware proxy in between our mail server and the Net.  Is there a
simple and effective way to encrypt or password protect documents for
email transmission that doesn't cause problems with Imail or Declude and
doesn't require software to be installed on the recipient's end?

Thanks.

Kevin
---
[This E-mail was scanned for viruses.]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".The archives can be found
at http://www.mail-archive.com.

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".The archives can be found
at http://www.mail-archive.com.
---
[This E-mail was scanned for viruses.]





---
[This E-mail was scanned for viruses.]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".The archives can be found
at http://www.mail-archive.com.



---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".The archives can be found
at http://www.mail-archive.com.


RE: [Declude.Virus] Slightly OT: Encrypting or Securing Email Content

2005-10-11 Thread John T \(Lists\)
What is wrong with sharp objects? They make nice clean cuts.

Now, it's the blunt ones that I worry about.

John T
eServices For You

> -Original Message-
> From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]
> On Behalf Of Scott Fisher
> Sent: Tuesday, October 11, 2005 1:44 PM
> To: Declude.Virus@declude.com
> Subject: Re: [Declude.Virus] Slightly OT: Encrypting or Securing Email
Content
> 
> I block all encrypted zips based on the fact that I can't virus scan them.
> 
> But then again I'm slightly paranoid and should not be trusted with sharp
> objects.
> 
> - Original Message -
> From: "Kevin Rogers" <[EMAIL PROTECTED]>
> To: 
> Sent: Tuesday, October 11, 2005 3:08 PM
> Subject: Re: [Declude.Virus] Slightly OT: Encrypting or Securing Email
> Content
> 
> 
> > So it's this forum's consensus that if I have PRO I should not block all
> > EZIPs - I should just block the other extensions even if they are found
> > within ZIP files?
> >
> > I do send out notices when a file gets blocked, but I don't have a
requeue
> > script in place.  I'll search for one and see what I can do.  Thanks.
> >
> >
> >
> > Darin Cox wrote:
> >
> >>If you have Declude Virus/EVA Pro you can switch to banning extensions
> >>within zips.  With Standard, you may want to continue to ban encrypted
> >>zips.
> >>
> >>In either case, you will probably want to send out notices for banned
> >>files,
> >>notifying the intended recipient that a file sent to them was blocked.
> >>Include a link in the notification for them to requeue the message if it
> >>was
> >>legit and they want to receive it.  Scripts to requeue messages have
been
> >>posted to the list in the past, but they are very simple to create by
just
> >>moving the Q and D files back to the spool directory... possibly going
as
> >>far as launching the SMTP32 process to immediately send the message if
you
> >>don't want your user to wait for the next queue run.
> >>
> >>Darin.
> >>
> >>
> >>- Original Message -
> >>From: "Kevin Rogers" <[EMAIL PROTECTED]>
> >>To: 
> >>Sent: Tuesday, October 11, 2005 1:26 AM
> >>Subject: [Declude.Virus] Slightly OT: Encrypting or Securing Email
Content
> >>
> >>
> >>We're looking for a simple way to opportunistically allow our users to
> >>encrypt or password-protect certain emails and/or their attachments that
> >>contain sensitive data.  We're running Declude Pro and have banned EZIP
> >>extensions (the highly recommended suggestion from several people on
> >>this forum), so that kinda rules out PKZIP and any kind of ZIP program
> >>(because as soon as you password-protect a ZIP file, it becomes an EZIP
> >>file).  We looked at PGP, but it seems very complex and seems to require
> >>a hardware proxy in between our mail server and the Net.  Is there a
> >>simple and effective way to encrypt or password protect documents for
> >>email transmission that doesn't cause problems with Imail or Declude and
> >>doesn't require software to be installed on the recipient's end?
> >>
> >>Thanks.
> >>
> >>Kevin
> >>---
> >>[This E-mail was scanned for viruses.]
> >>
> >>---
> >>This E-mail came from the Declude.Virus mailing list.  To
> >>unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> >>type "unsubscribe Declude.Virus".The archives can be found
> >>at http://www.mail-archive.com.
> >>
> >>---
> >>This E-mail came from the Declude.Virus mailing list.  To
> >>unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> >>type "unsubscribe Declude.Virus".The archives can be found
> >>at http://www.mail-archive.com.
> >>---
> >>[This E-mail was scanned for viruses.]
> >>
> >>
> >>
> >>
> > ---
> > [This E-mail was scanned for viruses.]
> >
> > ---
> > This E-mail came from the Declude.Virus mailing list.  To
> > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> > type "unsubscribe Declude.Virus".The archives can be found
> > at http://www.mail-archive.com.
> >
> 
> ---
> This E-mail came from the Declude.Virus mailing list.  To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.Virus".The archives can be found
> at http://www.mail-archive.com.

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".The archives can be found
at http://www.mail-archive.com.


Re: [Declude.Virus] Slightly OT: Encrypting or Securing Email Content

2005-10-11 Thread Darrell \([EMAIL PROTECTED])
Please no talk about sharp objects - I just had a vasectomy a couple of 
hours ago - oh the pain...


Darrell

---
Check out http://www.invariantsystems.com for utilities for Declude And 
Imail.  IMail Queue Monitoring, Declude Overflow Queue Monitoring, SURBL/URI 
integration, MRTG Integration, and Log Parsers.


- Original Message - 
From: "John T (Lists)" <[EMAIL PROTECTED]>

To: 
Sent: Tuesday, October 11, 2005 5:00 PM
Subject: RE: [Declude.Virus] Slightly OT: Encrypting or Securing Email 
Content



What is wrong with sharp objects? They make nice clean cuts.

Now, it's the blunt ones that I worry about.

John T
eServices For You


-Original Message-
From: [EMAIL PROTECTED]

[mailto:[EMAIL PROTECTED]

On Behalf Of Scott Fisher
Sent: Tuesday, October 11, 2005 1:44 PM
To: Declude.Virus@declude.com
Subject: Re: [Declude.Virus] Slightly OT: Encrypting or Securing Email

Content


I block all encrypted zips based on the fact that I can't virus scan them.

But then again I'm slightly paranoid and should not be trusted with sharp
objects.

- Original Message -
From: "Kevin Rogers" <[EMAIL PROTECTED]>
To: 
Sent: Tuesday, October 11, 2005 3:08 PM
Subject: Re: [Declude.Virus] Slightly OT: Encrypting or Securing Email
Content


> So it's this forum's consensus that if I have PRO I should not block all
> EZIPs - I should just block the other extensions even if they are found
> within ZIP files?
>
> I do send out notices when a file gets blocked, but I don't have a

requeue

> script in place.  I'll search for one and see what I can do.  Thanks.
>
>
>
> Darin Cox wrote:
>
>>If you have Declude Virus/EVA Pro you can switch to banning extensions
>>within zips.  With Standard, you may want to continue to ban encrypted
>>zips.
>>
>>In either case, you will probably want to send out notices for banned
>>files,
>>notifying the intended recipient that a file sent to them was blocked.
>>Include a link in the notification for them to requeue the message if it
>>was
>>legit and they want to receive it.  Scripts to requeue messages have

been

>>posted to the list in the past, but they are very simple to create by

just

>>moving the Q and D files back to the spool directory... possibly going

as

>>far as launching the SMTP32 process to immediately send the message if

you

>>don't want your user to wait for the next queue run.
>>
>>Darin.
>>
>>
>>- Original Message -
>>From: "Kevin Rogers" <[EMAIL PROTECTED]>
>>To: 
>>Sent: Tuesday, October 11, 2005 1:26 AM
>>Subject: [Declude.Virus] Slightly OT: Encrypting or Securing Email

Content

>>
>>
>>We're looking for a simple way to opportunistically allow our users to
>>encrypt or password-protect certain emails and/or their attachments that
>>contain sensitive data.  We're running Declude Pro and have banned EZIP
>>extensions (the highly recommended suggestion from several people on
>>this forum), so that kinda rules out PKZIP and any kind of ZIP program
>>(because as soon as you password-protect a ZIP file, it becomes an EZIP
>>file).  We looked at PGP, but it seems very complex and seems to require
>>a hardware proxy in between our mail server and the Net.  Is there a
>>simple and effective way to encrypt or password protect documents for
>>email transmission that doesn't cause problems with Imail or Declude and
>>doesn't require software to be installed on the recipient's end?
>>
>>Thanks.
>>
>>Kevin
>>---
>>[This E-mail was scanned for viruses.]
>>
>>---
>>This E-mail came from the Declude.Virus mailing list.  To
>>unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
>>type "unsubscribe Declude.Virus".The archives can be found
>>at http://www.mail-archive.com.
>>
>>---
>>This E-mail came from the Declude.Virus mailing list.  To
>>unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
>>type "unsubscribe Declude.Virus".The archives can be found
>>at http://www.mail-archive.com.
>>---
>>[This E-mail was scanned for viruses.]
>>
>>
>>
>>
> ---
> [This E-mail was scanned for viruses.]
>
> ---
> This E-mail came from the Declude.Virus mailing list.  To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.Virus".The archives can be found
> at http://www.mail-archive.com.
>

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".The archives can be found
at http://www.mail-archive.com.


---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".The archives can be found
at http://www.mail-archive.com.

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".The archives can be found
at http://www.mail-archive.com.


RE: [Declude.Virus] Slightly OT: Encrypting or Securing Email Content

2005-10-11 Thread Colbeck, Andrew
How about "cock of the walk" jokes? 

> -Original Message-
> From: [EMAIL PROTECTED] 
> [mailto:[EMAIL PROTECTED] On Behalf Of Darrell 
> ([EMAIL PROTECTED])
> Sent: Tuesday, October 11, 2005 2:44 PM
> To: Declude.Virus@declude.com
> Subject: Re: [Declude.Virus] Slightly OT: Encrypting or 
> Securing Email Content
> 
> Please no talk about sharp objects - I just had a vasectomy a 
> couple of hours ago - oh the pain...
> 
> Darrell
> 
> ---
> Check out http://www.invariantsystems.com for utilities for 
> Declude And Imail.  IMail Queue Monitoring, Declude Overflow 
> Queue Monitoring, SURBL/URI integration, MRTG Integration, 
> and Log Parsers.
> 
> - Original Message -
> From: "John T (Lists)" <[EMAIL PROTECTED]>
> To: 
> Sent: Tuesday, October 11, 2005 5:00 PM
> Subject: RE: [Declude.Virus] Slightly OT: Encrypting or 
> Securing Email Content
> 
> 
> What is wrong with sharp objects? They make nice clean cuts.
> 
> Now, it's the blunt ones that I worry about.
> 
> John T
> eServices For You
> 
> > -Original Message-
> > From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]
> > On Behalf Of Scott Fisher
> > Sent: Tuesday, October 11, 2005 1:44 PM
> > To: Declude.Virus@declude.com
> > Subject: Re: [Declude.Virus] Slightly OT: Encrypting or 
> Securing Email
> Content
> >
> > I block all encrypted zips based on the fact that I can't 
> virus scan them.
> >
> > But then again I'm slightly paranoid and should not be trusted with 
> > sharp objects.
> >
> > - Original Message -
> > From: "Kevin Rogers" <[EMAIL PROTECTED]>
> > To: 
> > Sent: Tuesday, October 11, 2005 3:08 PM
> > Subject: Re: [Declude.Virus] Slightly OT: Encrypting or 
> Securing Email 
> > Content
> >
> >
> > > So it's this forum's consensus that if I have PRO I 
> should not block 
> > > all EZIPs - I should just block the other extensions even if they 
> > > are found within ZIP files?
> > >
> > > I do send out notices when a file gets blocked, but I don't have a
> requeue
> > > script in place.  I'll search for one and see what I can 
> do.  Thanks.
> > >
> > >
> > >
> > > Darin Cox wrote:
> > >
> > >>If you have Declude Virus/EVA Pro you can switch to banning 
> > >>extensions within zips.  With Standard, you may want to 
> continue to 
> > >>ban encrypted zips.
> > >>
> > >>In either case, you will probably want to send out notices for 
> > >>banned files, notifying the intended recipient that a 
> file sent to 
> > >>them was blocked.
> > >>Include a link in the notification for them to requeue 
> the message 
> > >>if it was legit and they want to receive it.  Scripts to requeue 
> > >>messages have
> been
> > >>posted to the list in the past, but they are very simple 
> to create 
> > >>by
> just
> > >>moving the Q and D files back to the spool directory... possibly 
> > >>going
> as
> > >>far as launching the SMTP32 process to immediately send 
> the message 
> > >>if
> you
> > >>don't want your user to wait for the next queue run.
> > >>
> > >>Darin.
> > >>
> > >>
> > >>- Original Message -
> > >>From: "Kevin Rogers" <[EMAIL PROTECTED]>
> > >>To: 
> > >>Sent: Tuesday, October 11, 2005 1:26 AM
> > >>Subject: [Declude.Virus] Slightly OT: Encrypting or Securing Email
> Content
> > >>
> > >>
> > >>We're looking for a simple way to opportunistically allow 
> our users 
> > >>to encrypt or password-protect certain emails and/or their 
> > >>attachments that contain sensitive data.  We're running 
> Declude Pro 
> > >>and have banned EZIP extensions (the highly recommended 
> suggestion 
> > >>from several people on this forum), so that kinda rules out PKZIP 
> > >>and any kind of ZIP program (because as soon as you 
> password-protect 
> > >>a ZIP file, it becomes an EZIP file).  We looked at PGP, but it 
> > >>seems very complex and seems to require a hardware proxy 
> in between 
> > >>our mail server and the Net.  Is there a simple and 
> effective way to 
> > >>encrypt or password protect documents for email tr

RE: [Declude.Virus] Slightly OT: Encrypting or Securing Email Content

2005-10-11 Thread John T \(Lists\)
Yah, those doctors and their instruments. Ouch.

John T
eServices For You


> -Original Message-
> From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]
> On Behalf Of Darrell ([EMAIL PROTECTED])
> Sent: Tuesday, October 11, 2005 2:44 PM
> To: Declude.Virus@declude.com
> Subject: Re: [Declude.Virus] Slightly OT: Encrypting or Securing Email
Content
> 
> Please no talk about sharp objects - I just had a vasectomy a couple of
> hours ago - oh the pain...
> 
> Darrell
> 
> ---
> Check out http://www.invariantsystems.com for utilities for Declude And
> Imail.  IMail Queue Monitoring, Declude Overflow Queue Monitoring,
SURBL/URI
> integration, MRTG Integration, and Log Parsers.
> 
> - Original Message -
> From: "John T (Lists)" <[EMAIL PROTECTED]>
> To: 
> Sent: Tuesday, October 11, 2005 5:00 PM
> Subject: RE: [Declude.Virus] Slightly OT: Encrypting or Securing Email
> Content
> 
> 
> What is wrong with sharp objects? They make nice clean cuts.
> 
> Now, it's the blunt ones that I worry about.
> 
> John T
> eServices For You
> 
> > -Original Message-
> > From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]
> > On Behalf Of Scott Fisher
> > Sent: Tuesday, October 11, 2005 1:44 PM
> > To: Declude.Virus@declude.com
> > Subject: Re: [Declude.Virus] Slightly OT: Encrypting or Securing Email
> Content
> >
> > I block all encrypted zips based on the fact that I can't virus scan
them.
> >
> > But then again I'm slightly paranoid and should not be trusted with
sharp
> > objects.
> >
> > ----- Original Message -
> > From: "Kevin Rogers" <[EMAIL PROTECTED]>
> > To: 
> > Sent: Tuesday, October 11, 2005 3:08 PM
> > Subject: Re: [Declude.Virus] Slightly OT: Encrypting or Securing Email
> > Content
> >
> >
> > > So it's this forum's consensus that if I have PRO I should not block
all
> > > EZIPs - I should just block the other extensions even if they are
found
> > > within ZIP files?
> > >
> > > I do send out notices when a file gets blocked, but I don't have a
> requeue
> > > script in place.  I'll search for one and see what I can do.  Thanks.
> > >
> > >
> > >
> > > Darin Cox wrote:
> > >
> > >>If you have Declude Virus/EVA Pro you can switch to banning extensions
> > >>within zips.  With Standard, you may want to continue to ban encrypted
> > >>zips.
> > >>
> > >>In either case, you will probably want to send out notices for banned
> > >>files,
> > >>notifying the intended recipient that a file sent to them was blocked.
> > >>Include a link in the notification for them to requeue the message if
it
> > >>was
> > >>legit and they want to receive it.  Scripts to requeue messages have
> been
> > >>posted to the list in the past, but they are very simple to create by
> just
> > >>moving the Q and D files back to the spool directory... possibly going
> as
> > >>far as launching the SMTP32 process to immediately send the message if
> you
> > >>don't want your user to wait for the next queue run.
> > >>
> > >>Darin.
> > >>
> > >>
> > >>- Original Message -
> > >>From: "Kevin Rogers" <[EMAIL PROTECTED]>
> > >>To: 
> > >>Sent: Tuesday, October 11, 2005 1:26 AM
> > >>Subject: [Declude.Virus] Slightly OT: Encrypting or Securing Email
> Content
> > >>
> > >>
> > >>We're looking for a simple way to opportunistically allow our users to
> > >>encrypt or password-protect certain emails and/or their attachments
that
> > >>contain sensitive data.  We're running Declude Pro and have banned
EZIP
> > >>extensions (the highly recommended suggestion from several people on
> > >>this forum), so that kinda rules out PKZIP and any kind of ZIP program
> > >>(because as soon as you password-protect a ZIP file, it becomes an
EZIP
> > >>file).  We looked at PGP, but it seems very complex and seems to
require
> > >>a hardware proxy in between our mail server and the Net.  Is there a
> > >>simple and effective way to encrypt or password protect documents for
> > >>email transmission that doesn't cause problems with Imail or Declude
and
> > >>doesn't require software to be installed on the recipient's end?
> > 

Re: [Declude.Virus] Slightly OT: Encrypting or Securing Email Content

2005-10-11 Thread Kevin Rogers

Ok OK already.  lol

So some people block EZIPs and some don't.  If you don't block EZIPs but 
do block certain file extensions within EZIPs, is it the same security 
as if you blocked them outright?  Or are there ways to slip bad stuff 
through an EZIP even if you block most bad extensions?  Or can you 
really not scan EZIPs as well as other files.


Thanks


Scott Fisher wrote:

I block all encrypted zips based on the fact that I can't virus scan 
them.


But then again I'm slightly paranoid and should not be trusted with 
sharp objects.


- Original Message - From: "Kevin Rogers" <[EMAIL PROTECTED]>
To: 
Sent: Tuesday, October 11, 2005 3:08 PM
Subject: Re: [Declude.Virus] Slightly OT: Encrypting or Securing Email 
Content



So it's this forum's consensus that if I have PRO I should not block 
all EZIPs - I should just block the other extensions even if they are 
found within ZIP files?


I do send out notices when a file gets blocked, but I don't have a 
requeue script in place.  I'll search for one and see what I can do.  
Thanks.




Darin Cox wrote:


If you have Declude Virus/EVA Pro you can switch to banning extensions
within zips.  With Standard, you may want to continue to ban 
encrypted zips.


In either case, you will probably want to send out notices for 
banned files,

notifying the intended recipient that a file sent to them was blocked.
Include a link in the notification for them to requeue the message 
if it was
legit and they want to receive it.  Scripts to requeue messages have 
been
posted to the list in the past, but they are very simple to create 
by just
moving the Q and D files back to the spool directory... possibly 
going as
far as launching the SMTP32 process to immediately send the message 
if you

don't want your user to wait for the next queue run.

Darin.


- Original Message - From: "Kevin Rogers" 
<[EMAIL PROTECTED]>

To: 
Sent: Tuesday, October 11, 2005 1:26 AM
Subject: [Declude.Virus] Slightly OT: Encrypting or Securing Email 
Content



We're looking for a simple way to opportunistically allow our users to
encrypt or password-protect certain emails and/or their attachments 
that

contain sensitive data.  We're running Declude Pro and have banned EZIP
extensions (the highly recommended suggestion from several people on
this forum), so that kinda rules out PKZIP and any kind of ZIP program
(because as soon as you password-protect a ZIP file, it becomes an EZIP
file).  We looked at PGP, but it seems very complex and seems to 
require

a hardware proxy in between our mail server and the Net.  Is there a
simple and effective way to encrypt or password protect documents for
email transmission that doesn't cause problems with Imail or Declude 
and

doesn't require software to be installed on the recipient's end?

Thanks.

Kevin
---
[This E-mail was scanned for viruses.]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".The archives can be found
at http://www.mail-archive.com.

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".The archives can be found
at http://www.mail-archive.com.
---
[This E-mail was scanned for viruses.]





---
[This E-mail was scanned for viruses.]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".The archives can be found
at http://www.mail-archive.com.



---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".The archives can be found
at http://www.mail-archive.com.
---
[This E-mail was scanned for viruses.]




---
[This E-mail was scanned for viruses.]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".The archives can be found
at http://www.mail-archive.com.


Re: [Declude.Virus] Slightly OT: Encrypting or Securing Email Content

2005-10-11 Thread Michael Thomas - Mathbox
Hah,

On that note:

Is it safe? Answer me! Is it safe?

For those of you that do not recognize it, it is from "Marthon Man" (1976)
starring Dustin Hoffman.

A graduate student and obsessive runner in New York is drawn into a
mysterious plot involving his globe trotting brother, his European
girlfriend and a Nazi war criminal in hiding. Includes one of the most
agonizing torture scenes ever portrayed. "Is it safe?" You'll never see your
dentist the same way again.

If you have never seen it, rent it and enjoy

Mike

- Original Message - 
From: "John T (Lists)" <[EMAIL PROTECTED]>
To: 
Sent: Tuesday, October 11, 2005 6:14 PM
Subject: RE: [Declude.Virus] Slightly OT: Encrypting or Securing Email
Content


Yah, those doctors and their instruments. Ouch.

John T
eServices For You


> -Original Message-
> From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]
> On Behalf Of Darrell ([EMAIL PROTECTED])
> Sent: Tuesday, October 11, 2005 2:44 PM
> To: Declude.Virus@declude.com
> Subject: Re: [Declude.Virus] Slightly OT: Encrypting or Securing Email
Content
>
> Please no talk about sharp objects - I just had a vasectomy a couple of
> hours ago - oh the pain...
>
> Darrell
>
> ---
> Check out http://www.invariantsystems.com for utilities for Declude And
> Imail.  IMail Queue Monitoring, Declude Overflow Queue Monitoring,
SURBL/URI
> integration, MRTG Integration, and Log Parsers.
>
> - Original Message -
> From: "John T (Lists)" <[EMAIL PROTECTED]>
> To: 
> Sent: Tuesday, October 11, 2005 5:00 PM
> Subject: RE: [Declude.Virus] Slightly OT: Encrypting or Securing Email
> Content
>
>
> What is wrong with sharp objects? They make nice clean cuts.
>
> Now, it's the blunt ones that I worry about.
>
> John T
> eServices For You
>
> > -Original Message-
> > From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]
> > On Behalf Of Scott Fisher
> > Sent: Tuesday, October 11, 2005 1:44 PM
> > To: Declude.Virus@declude.com
> > Subject: Re: [Declude.Virus] Slightly OT: Encrypting or Securing Email
> Content
> >
> > I block all encrypted zips based on the fact that I can't virus scan
them.
> >
> > But then again I'm slightly paranoid and should not be trusted with
sharp
> > objects.
> >
> > - Original Message -
> > From: "Kevin Rogers" <[EMAIL PROTECTED]>
> > To: 
> > Sent: Tuesday, October 11, 2005 3:08 PM
> > Subject: Re: [Declude.Virus] Slightly OT: Encrypting or Securing Email
> > Content
> >
> >
> > > So it's this forum's consensus that if I have PRO I should not block
all
> > > EZIPs - I should just block the other extensions even if they are
found
> > > within ZIP files?
> > >
> > > I do send out notices when a file gets blocked, but I don't have a
> requeue
> > > script in place.  I'll search for one and see what I can do.  Thanks.
> > >
> > >
> > >
> > > Darin Cox wrote:
> > >
> > >>If you have Declude Virus/EVA Pro you can switch to banning extensions
> > >>within zips.  With Standard, you may want to continue to ban encrypted
> > >>zips.
> > >>
> > >>In either case, you will probably want to send out notices for banned
> > >>files,
> > >>notifying the intended recipient that a file sent to them was blocked.
> > >>Include a link in the notification for them to requeue the message if
it
> > >>was
> > >>legit and they want to receive it.  Scripts to requeue messages have
> been
> > >>posted to the list in the past, but they are very simple to create by
> just
> > >>moving the Q and D files back to the spool directory... possibly going
> as
> > >>far as launching the SMTP32 process to immediately send the message if
> you
> > >>don't want your user to wait for the next queue run.
> > >>
> > >>Darin.
> > >>
> > >>
> > >>- Original Message -
> > >>From: "Kevin Rogers" <[EMAIL PROTECTED]>
> > >>To: 
> > >>Sent: Tuesday, October 11, 2005 1:26 AM
> > >>Subject: [Declude.Virus] Slightly OT: Encrypting or Securing Email
> Content
> > >>
> > >>
> > >>We're looking for a simple way to opportunistically allow our users to
> > >>encrypt or password-protect certain emails and/or their attachments
that
> > >>contain sensitive data.  We're running Decl

RE: [Declude.Virus] Slightly OT: Encrypting or Securing Email Content

2005-10-11 Thread John T \(Lists\)
Well, the answer lies within how those features were introduced. When the
first wave of viruses came out using zip files, we blocked zip files
entirely. But then we asked for a way to pass EZIP files, so Scott added
that feature whereby BANEXT ZIP did not ban EZIPs, instead introducing
BANEXT EZIP. Then when waves of viruses started to come out using EZIP
files, the first thing we did was ban then and then asked Scott to come up
with a work around. He did this by introducing BANZIPEXTs and BANEZIPEXTS
which only banned a zip or EZIP if it had a file in it that was banned. But
that is only for Pro version.

So if you are using Pro version, you can just use BANZIPEXTS and BANEZIPEXTS
if desired, leaving "BANEXT ZIP" and "BANEXT EZIP" in the virus.cfg but
commented out. That way, if there is a sudden need to do so, it can be done
quickly.

John T
eServices For You


> -Original Message-
> From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]
> On Behalf Of Kevin Rogers
> Sent: Tuesday, October 11, 2005 3:36 PM
> To: Declude.Virus@declude.com
> Subject: Re: [Declude.Virus] Slightly OT: Encrypting or Securing Email
Content
> 
> Ok OK already.  lol
> 
> So some people block EZIPs and some don't.  If you don't block EZIPs but
> do block certain file extensions within EZIPs, is it the same security
> as if you blocked them outright?  Or are there ways to slip bad stuff
> through an EZIP even if you block most bad extensions?  Or can you
> really not scan EZIPs as well as other files.
> 
> Thanks
> 
> 
> Scott Fisher wrote:
> 
> > I block all encrypted zips based on the fact that I can't virus scan
> > them.
> >
> > But then again I'm slightly paranoid and should not be trusted with
> > sharp objects.
> >
> > - Original Message ----- From: "Kevin Rogers" <[EMAIL PROTECTED]>
> > To: 
> > Sent: Tuesday, October 11, 2005 3:08 PM
> > Subject: Re: [Declude.Virus] Slightly OT: Encrypting or Securing Email
> > Content
> >
> >
> >> So it's this forum's consensus that if I have PRO I should not block
> >> all EZIPs - I should just block the other extensions even if they are
> >> found within ZIP files?
> >>
> >> I do send out notices when a file gets blocked, but I don't have a
> >> requeue script in place.  I'll search for one and see what I can do.
> >> Thanks.
> >>
> >>
> >>
> >> Darin Cox wrote:
> >>
> >>> If you have Declude Virus/EVA Pro you can switch to banning extensions
> >>> within zips.  With Standard, you may want to continue to ban
> >>> encrypted zips.
> >>>
> >>> In either case, you will probably want to send out notices for
> >>> banned files,
> >>> notifying the intended recipient that a file sent to them was blocked.
> >>> Include a link in the notification for them to requeue the message
> >>> if it was
> >>> legit and they want to receive it.  Scripts to requeue messages have
> >>> been
> >>> posted to the list in the past, but they are very simple to create
> >>> by just
> >>> moving the Q and D files back to the spool directory... possibly
> >>> going as
> >>> far as launching the SMTP32 process to immediately send the message
> >>> if you
> >>> don't want your user to wait for the next queue run.
> >>>
> >>> Darin.
> >>>
> >>>
> >>> - Original Message - From: "Kevin Rogers"
> >>> <[EMAIL PROTECTED]>
> >>> To: 
> >>> Sent: Tuesday, October 11, 2005 1:26 AM
> >>> Subject: [Declude.Virus] Slightly OT: Encrypting or Securing Email
> >>> Content
> >>>
> >>>
> >>> We're looking for a simple way to opportunistically allow our users to
> >>> encrypt or password-protect certain emails and/or their attachments
> >>> that
> >>> contain sensitive data.  We're running Declude Pro and have banned
EZIP
> >>> extensions (the highly recommended suggestion from several people on
> >>> this forum), so that kinda rules out PKZIP and any kind of ZIP program
> >>> (because as soon as you password-protect a ZIP file, it becomes an
EZIP
> >>> file).  We looked at PGP, but it seems very complex and seems to
> >>> require
> >>> a hardware proxy in between our mail server and the Net.  Is there a
> >>> simple and effective way to encrypt or password protect documents for
> &

RE: [Declude.Virus] Slightly OT: Encrypting or Securing Email Content

2005-10-11 Thread Marc Catuogno
You have a user base that is educated and that you trust enough to click a
link that would send them a potential virus?  I so envy you...

I'm scared to let them open and send and receive regular e-mail.  I had one
user ready to open an account for someone in Nigera.

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Darin Cox
Sent: Tuesday, October 11, 2005 8:14 AM
To: Declude.Virus@declude.com
Subject: Re: [Declude.Virus] Slightly OT: Encrypting or Securing Email
Content

If you have Declude Virus/EVA Pro you can switch to banning extensions
within zips.  With Standard, you may want to continue to ban encrypted zips.

In either case, you will probably want to send out notices for banned files,
notifying the intended recipient that a file sent to them was blocked.
Include a link in the notification for them to requeue the message if it was
legit and they want to receive it.  Scripts to requeue messages have been
posted to the list in the past, but they are very simple to create by just
moving the Q and D files back to the spool directory... possibly going as
far as launching the SMTP32 process to immediately send the message if you
don't want your user to wait for the next queue run.

Darin.


- Original Message - 
From: "Kevin Rogers" <[EMAIL PROTECTED]>
To: 
Sent: Tuesday, October 11, 2005 1:26 AM
Subject: [Declude.Virus] Slightly OT: Encrypting or Securing Email Content


We're looking for a simple way to opportunistically allow our users to
encrypt or password-protect certain emails and/or their attachments that
contain sensitive data.  We're running Declude Pro and have banned EZIP
extensions (the highly recommended suggestion from several people on
this forum), so that kinda rules out PKZIP and any kind of ZIP program
(because as soon as you password-protect a ZIP file, it becomes an EZIP
file).  We looked at PGP, but it seems very complex and seems to require
a hardware proxy in between our mail server and the Net.  Is there a
simple and effective way to encrypt or password protect documents for
email transmission that doesn't cause problems with Imail or Declude and
doesn't require software to be installed on the recipient's end?

Thanks.

Kevin
---
[This E-mail was scanned for viruses.]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".The archives can be found
at http://www.mail-archive.com.

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".The archives can be found
at http://www.mail-archive.com.
---
[This E-mail scanned for viruses by Declude Virus]



---
[This E-mail scanned for viruses by Declude Virus]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".The archives can be found
at http://www.mail-archive.com.


Re: [Declude.Virus] Slightly OT: Encrypting or Securing Email Content

2005-10-11 Thread Darin Cox
Nope... the notification includes quite a bit of information so they can
completely decide for themselves if they want it.  Many just leave them for
the 7 days, at which point they are deleted.

If you give the user enough information, they are capable of making a
decision... and it's rare that we see something banned that isn't legit...
otherwise it's generally caught as spam or virus.

Darin.


- Original Message - 
From: "Marc Catuogno" <[EMAIL PROTECTED]>
To: 
Sent: Tuesday, October 11, 2005 11:38 PM
Subject: RE: [Declude.Virus] Slightly OT: Encrypting or Securing Email
Content


You have a user base that is educated and that you trust enough to click a
link that would send them a potential virus?  I so envy you...

I'm scared to let them open and send and receive regular e-mail.  I had one
user ready to open an account for someone in Nigera.

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Darin Cox
Sent: Tuesday, October 11, 2005 8:14 AM
To: Declude.Virus@declude.com
Subject: Re: [Declude.Virus] Slightly OT: Encrypting or Securing Email
Content

If you have Declude Virus/EVA Pro you can switch to banning extensions
within zips.  With Standard, you may want to continue to ban encrypted zips.

In either case, you will probably want to send out notices for banned files,
notifying the intended recipient that a file sent to them was blocked.
Include a link in the notification for them to requeue the message if it was
legit and they want to receive it.  Scripts to requeue messages have been
posted to the list in the past, but they are very simple to create by just
moving the Q and D files back to the spool directory... possibly going as
far as launching the SMTP32 process to immediately send the message if you
don't want your user to wait for the next queue run.

Darin.


- Original Message - 
From: "Kevin Rogers" <[EMAIL PROTECTED]>
To: 
Sent: Tuesday, October 11, 2005 1:26 AM
Subject: [Declude.Virus] Slightly OT: Encrypting or Securing Email Content


We're looking for a simple way to opportunistically allow our users to
encrypt or password-protect certain emails and/or their attachments that
contain sensitive data.  We're running Declude Pro and have banned EZIP
extensions (the highly recommended suggestion from several people on
this forum), so that kinda rules out PKZIP and any kind of ZIP program
(because as soon as you password-protect a ZIP file, it becomes an EZIP
file).  We looked at PGP, but it seems very complex and seems to require
a hardware proxy in between our mail server and the Net.  Is there a
simple and effective way to encrypt or password protect documents for
email transmission that doesn't cause problems with Imail or Declude and
doesn't require software to be installed on the recipient's end?

Thanks.

Kevin
---
[This E-mail was scanned for viruses.]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".The archives can be found
at http://www.mail-archive.com.

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".The archives can be found
at http://www.mail-archive.com.
---
[This E-mail scanned for viruses by Declude Virus]



---
[This E-mail scanned for viruses by Declude Virus]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".The archives can be found
at http://www.mail-archive.com.

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".The archives can be found
at http://www.mail-archive.com.


Re: [Declude.Virus] Slightly OT: Encrypting or Securing Email Content

2005-10-12 Thread Kevin Rogers
Yes, but it's $100 per user and (correct me if I'm wrong here), with PGP 
both the sender and the recipient need to have PGP installed in order to 
use it.  Which is most likely out of the question for us.  But I've 
checked their site and I'm not positive about this.



Darrell ([EMAIL PROTECTED]) wrote:


Kevin,
I thought PGP had a desktop version that integrates directly with 
outlook?

Darrell

Check out http://www.invariantsystems.com for utilities for Declude 
And Imail.  IMail/Declude Overflow Queue Monitoring, SURBL/URI 
integration, MRTG Integration, and Log Parsers.


Kevin Rogers writes:

We're looking for a simple way to opportunistically allow our users 
to encrypt or password-protect certain emails and/or their 
attachments that contain sensitive data.  We're running Declude Pro 
and have banned EZIP extensions (the highly recommended suggestion 
from several people on this forum), so that kinda rules out PKZIP and 
any kind of ZIP program (because as soon as you password-protect a 
ZIP file, it becomes an EZIP file).  We looked at PGP, but it seems 
very complex and seems to require a hardware proxy in between our 
mail server and the Net.  Is there a simple and effective way to 
encrypt or password protect documents for email transmission that 
doesn't cause problems with Imail or Declude and doesn't require 
software to be installed on the recipient's end?

Thanks.
Kevin
---
[This E-mail was scanned for viruses.]
---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".The archives can be found
at http://www.mail-archive.com.




---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".The archives can be found
at http://www.mail-archive.com.
---
[This E-mail was scanned for viruses.]




---
[This E-mail was scanned for viruses.]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".The archives can be found
at http://www.mail-archive.com.


RE: [Declude.Virus] Slightly OT: Encrypting or Securing Email Content

2005-10-12 Thread Douglas Cohn
Hey stupid me but why not use a file transfer program for transferring files
and not worry about what you block in email.  That is what FTP was invented
for anyway.  If you have any type of Intranet or help desk system you should
have a place that allows users to both upload files and download files.

Email was never designed as a method of transferring files.  Even though it
is used that way all too often.  A Simple web pahe with ASPUpload and
another page with the shared files would solve your issue.  Make it more
complex and set access rights on the files as well.

Just my two cents

Doug 

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Kevin Rogers
Sent: Tuesday, October 11, 2005 1:26 AM
To: Declude.Virus@declude.com
Subject: [Declude.Virus] Slightly OT: Encrypting or Securing Email Content

We're looking for a simple way to opportunistically allow our users to
encrypt or password-protect certain emails and/or their attachments that
contain sensitive data.  We're running Declude Pro and have banned EZIP
extensions (the highly recommended suggestion from several people on this
forum), so that kinda rules out PKZIP and any kind of ZIP program (because
as soon as you password-protect a ZIP file, it becomes an EZIP file).  We
looked at PGP, but it seems very complex and seems to require a hardware
proxy in between our mail server and the Net.  Is there a simple and
effective way to encrypt or password protect documents for email
transmission that doesn't cause problems with Imail or Declude and doesn't
require software to be installed on the recipient's end?

Thanks.

Kevin
---
[This E-mail was scanned for viruses.]

---
This E-mail came from the Declude.Virus mailing list.  To unsubscribe, just
send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".The archives can be found
at http://www.mail-archive.com.
---
[This E-mail scanned for viruses by Declude Virus]

---
[This E-mail scanned for viruses by Declude Virus]


---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".The archives can be found
at http://www.mail-archive.com.