Re: [Declude.Virus] ban ext not working

2003-06-28 Thread Serge
if a file has a banned extension and a virus
will it trigger the banned extension email or the recep, ... virus email?
is a banned extension first scanned for viruses ?


---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.


Re: [Declude.Virus] ban ext not working

2003-06-28 Thread R. Scott Perry

attached are the 2 part of imail log file, receiving and delivering
too long, to many recepients
maybe thats why it went thru ?
Do you have any C:\Declude.gp1 or C:\Declude.gp2 files?  If so, could you 
send them to me (off the list)?

   -Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers.
Declude Virus: Catches known viruses and is the leader in mailserver 
vulnerability detection.
Find out what you have been missing: Ask for a free 30-day evaluation.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.


Re: [Declude.Virus] ban ext not working

2003-06-28 Thread R. Scott Perry

if a file has a banned extension and a virus
will it trigger the banned extension email or the recep, ... virus email?
is a banned extension first scanned for viruses ?
In the case of an E-mail with a banned file extension and a virus, Declude 
Virus will treat it exactly the same as if it did not have a banned file 
extension, but instead just contained a virus (so it should get caught and 
virus notifications should get sent out).

   -Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers.
Declude Virus: Catches known viruses and is the leader in mailserver 
vulnerability detection.
Find out what you have been missing: Ask for a free 30-day evaluation.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.


RE: [Declude.Virus] ban ext not working

2003-06-28 Thread John Tolmachoff \(Lists\)
 if a file has a banned extension and a virus
 will it trigger the banned extension email or the recep, ... virus email?
 is a banned extension first scanned for viruses ?

Virus scan first, if clean, checks for banned extension.

John Tolmachoff MCSE CSSA
Engineer/Consultant
eServices For You
www.eservicesforyou.com


---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.


Re: [Declude.Virus] ban ext not working

2003-06-28 Thread Serge
here is declude log
it did detect the virus, but why did it let it thru, and whithout changing
the header


06/27/2003 18:26:58 Q8c09067a02886365 Scanner 1: Virus=: W32/[EMAIL PROTECTED]
(corrupted) Attachment=15-10-GB.pdf.pif [3] I
06/27/2003 18:26:58 Q8c09067a02886365 Found a bogus .pif file
06/27/2003 18:26:58 Q8c09067a02886365 File(s) are INFECTED [:
W32/[EMAIL PROTECTED] (corrupted): 3]
06/27/2003 18:26:58 Q8c09067a02886365 Scanned: CONTAINS A VIRUS [MIME: 2
8604]
06/27/2003 18:26:58 Q8c09067a02886365 From: [EMAIL PROTECTED] To:
[EMAIL PROTECTED] [outgoing from 216.226.209.71]
06/27/2003 18:26:58 Q8c09067a02886365 Subject:  See todays hottest stars in
their most intimate moments



- Original Message -
From: Serge [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Saturday, June 28, 2003 3:23 AM
Subject: Re: [Declude.Virus] ban ext not working


 attached are the 2 part of imail log file, receiving and delivering
 too long, to many recepients
 maybe thats why it went thru ?

 banext did not work (it usualy works).
 fprot did not catch bugbear, it does when i resend the same message !
 no declude junkmail or virus headers added.

 any help, hints, ... appreciated
 thanks in advance




 - Original Message -
 From: John Tolmachoff (Lists) [EMAIL PROTECTED]
 To: [EMAIL PROTECTED]
 Sent: Saturday, June 28, 2003 12:20 AM
 Subject: RE: [Declude.Virus] ban ext not working


  Below is the header
  it does say:
 
  Received: from Diaby [216.226.209.71] by cefib.com
(SMTPD32-7.15) id AC0967A0288; Fri, 27 Jun 2003 18:25:13 +
 
  Doesn't this mean this is NOT an imail/webmessaging mail ?
  so why was it not scanned by declude ? no declude virus or junkmail
 headers
  were added
 
  Received: from Diaby [216.226.209.71] by cefib.com
(SMTPD32-7.15) id AC0967A0288; Fri, 27 Jun 2003 18:25:13 +
  From:  [EMAIL PROTECTED]
  Subject:  See todays hottest stars in their most intimate moments
  MIME-Version: 1.0
  Content-Type: multipart/mixed; boundary=--8SXJ1Q6JOLFJSQ
  Message-Id: [EMAIL PROTECTED]
  Date: Fri, 27 Jun 2003 19:11:25 +
  X-RCPT-TO: [EMAIL PROTECTED]
  Status: U
  X-UIDL: 352739436

 Can you find that message in the Imail log, find what the Imail file name
is
 and post a log snippet of it?

 John Tolmachoff MCSE CSSA
 Engineer/Consultant
 eServices For You
 www.eservicesforyou.com


 ---
 [This E-mail was scanned for viruses by Declude Virus
 (http://www.declude.com)]

 ---
 This E-mail came from the Declude.Virus mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.Virus.The archives can be found
 at http://www.mail-archive.com.





---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.


Re: [Declude.Virus] ban ext not working

2003-06-28 Thread R. Scott Perry

here is declude log
it did detect the virus, but why did it let it thru, and whithout changing
the header
Are you *positive* that the E-mail that was delivered is the one from the 
log file?  If you are running Declude JunkMail as well, were there any log 
file entries for this E-mail (ones that contain 8c09067a02886365 -- there 
shouldn't be any)?

   -Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers.
Declude Virus: Catches known viruses and is the leader in mailserver 
vulnerability detection.
Find out what you have been missing: Ask for a free 30-day evaluation.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.


RE: [Declude.Virus] ban ext not working

2003-06-28 Thread John Tolmachoff \(Lists\)
Actually, looks like some one put this back into the spool directory. Notice
what time Imail SMTP is processing it and what time Declude scanned it:

20030627 182647 127.0.0.1   SMTPD (067A0288) [216.226.209.71] RCPT
TO:[EMAIL PROTECTED]
20030627 182658 127.0.0.1   SMTPD (067A0288) [216.226.209.71]
E:\IMAILSRVR\spool\D8c09067a02886365.SMD 12250

06/27/2003 18:26:58 Q8c09067a02886365 Scanner 1: Virus=: W32/[EMAIL PROTECTED]
(corrupted) Attachment=15-10-GB.pdf.pif [3] I
06/27/2003 18:26:58 Q8c09067a02886365 Found a bogus .pif file 06/27/2003
18:26:58 Q8c09067a02886365 File(s) are INFECTED [: W32/[EMAIL PROTECTED]
(corrupted): 3] 06/27/2003 18:26:58 Q8c09067a02886365 Scanned: CONTAINS A
VIRUS [MIME: 2 8604] 06/27/2003 18:26:58 Q8c09067a02886365 From:
[EMAIL PROTECTED] To: [EMAIL PROTECTED] [outgoing from 216.226.209.71]
06/27/2003 18:26:58 Q8c09067a02886365 Subject:  See todays hottest stars in
their most intimate moments

20030627 185551 127.0.0.1   SMTP (5536)
E:\IMAILSRVR\spool\Q8c09067a02886365.SMD
20030627 185551 127.0.0.1   SMTP (5536) processing
E:\IMAILSRVR\spool\Q8c09067a02886365.SMD

Difference is almost 30 minutes.

John Tolmachoff MCSE CSSA
Engineer/Consultant
eServices For You
www.eservicesforyou.com


---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.


Re: [Declude.Virus] ban ext not working

2003-06-27 Thread Serge
seems that the messages are not beiing scanned by declude
nothing added to the header
is this possible? or the only possibility is that they are being sent by
imail1 /web messaging ?


---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.


Re: [Declude.Virus] ban ext not working

2003-06-27 Thread R. Scott Perry

seems that the messages are not beiing scanned by declude
nothing added to the header
is this possible? or the only possibility is that they are being sent by
imail1 /web messaging ?
E-mail sent via imail1.exe or web messaging will not get scanned by Declude 
with IMail v7 and earlier (unless you make some changes using the 
DAISYCHAIN option).

   -Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers.
Declude Virus: Catches known viruses and is the leader in mailserver 
vulnerability detection.
Find out what you have been missing: Ask for a free 30-day evaluation.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.


RE: [Declude.Virus] ban ext not working

2003-06-27 Thread Todd Holt
Does V8.0 hand this off to Declude differently?

Todd Holt
Xidix Technologies, Inc
Las Vegas, NV  USA
www.xidix.com


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry
Sent: Friday, June 27, 2003 2:24 PM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.Virus] ban ext not working


seems that the messages are not beiing scanned by declude
nothing added to the header
is this possible? or the only possibility is that they are being sent
by
imail1 /web messaging ?

E-mail sent via imail1.exe or web messaging will not get scanned by
Declude 
with IMail v7 and earlier (unless you make some changes using the 
DAISYCHAIN option).

-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers.
Declude Virus: Catches known viruses and is the leader in mailserver 
vulnerability detection.
Find out what you have been missing: Ask for a free 30-day evaluation.

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.
---
[This E-mail scanned for viruses by Declude Virus
(http://www.declude.com)]


---
[This E-mail scanned for viruses by Declude Virus (http://www.declude.com)]

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.


RE: [Declude.Virus] ban ext not working

2003-06-27 Thread R. Scott Perry

Does V8.0 hand this off to Declude differently?
With IMail v8, web messaging (and IMail1.exe) will send E-mail to Declude 
for scanning.

   -Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers.
Declude Virus: Catches known viruses and is the leader in mailserver 
vulnerability detection.
Find out what you have been missing: Ask for a free 30-day evaluation.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.


Re: [Declude.Virus] ban ext not working

2003-06-27 Thread Serge
OT
How can we verify (using the logs) that the message was sent using Imail1
and/or webmessaging
also, isthe instructions about daisychain available on website? or only in
archive ?

thanks


- Original Message -
From: R. Scott Perry [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Friday, June 27, 2003 9:24 PM
Subject: Re: [Declude.Virus] ban ext not working



 seems that the messages are not beiing scanned by declude
 nothing added to the header
 is this possible? or the only possibility is that they are being sent by
 imail1 /web messaging ?

 E-mail sent via imail1.exe or web messaging will not get scanned by
Declude
 with IMail v7 and earlier (unless you make some changes using the
 DAISYCHAIN option).

 -Scott
 ---
 Declude JunkMail: The advanced anti-spam solution for IMail mailservers.
 Declude Virus: Catches known viruses and is the leader in mailserver
 vulnerability detection.
 Find out what you have been missing: Ask for a free 30-day evaluation.

 ---
 [This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

 ---
 This E-mail came from the Declude.Virus mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.Virus.The archives can be found
 at http://www.mail-archive.com.




---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.


Re: [Declude.Virus] ban ext not working

2003-06-27 Thread Serge
Below is the header
it does say:

Received: from Diaby [216.226.209.71] by cefib.com
  (SMTPD32-7.15) id AC0967A0288; Fri, 27 Jun 2003 18:25:13 +

Doesn't this mean this is NOT an imail/webmessaging mail ?
so why was it not scanned by declude ? no declude virus or junkmail headers
were added



Received: from Diaby [216.226.209.71] by cefib.com
  (SMTPD32-7.15) id AC0967A0288; Fri, 27 Jun 2003 18:25:13 +
From:  [EMAIL PROTECTED]
Subject:  See todays hottest stars in their most intimate moments
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary=--8SXJ1Q6JOLFJSQ
Message-Id: [EMAIL PROTECTED]
Date: Fri, 27 Jun 2003 19:11:25 +
X-RCPT-TO: [EMAIL PROTECTED]
Status: U
X-UIDL: 352739436

8SXJ1Q6JOLFJSQ
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit

htmlbody BGCOLOR=#CC

TABLE WIDTH=600 BORDER=0 CELLPADDING=0 CELLSPACING=0 ALIGN=CENTER

TRTD COLSPAN=3

A HREF=http://www.easy-celebrities.com/index.phtml?1261375220;
TARGET=_blank

IMG
SRC=http://www.easy-celebrities.com/banners/images/generic_celeb_2_01.gif;
WIDTH=600 HEIGHT=28 BORDER=0 ALT=/A/TD

/TR

T

8SXJ1Q6JOLFJSQ
Content-Type: application/x-msdownload; name=15-10-GB.pdf.pif
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename=15-10-GB.pdf.pif

TVqQAAME//8AALgAQAAA
2A4fug4AtAnNIbgBTM0hVGhpcyBwcm9ncmFtIGNhbm5vdCBiZSBydW4gaW4gRE9TIG1v
ZGUuDQ0KJACPY1NsywI9P8sCPT/LAj0/sB4xP88CPT9IHjM/yQI9PyMdNz/eAj0/Ix05
P8kCPT+pHS4/wAI9P8sCPD9xAj0/Ix02P9sCPT9SaWNoywI9PwAAUEUAAEwBAwCQIbY8
AADgAA4BCwEGAAAgAQAAEOAGACABCAAA8AYAABAIQAAAEAIAAAQA


---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.


RE: [Declude.Virus] ban ext not working

2003-06-27 Thread John Tolmachoff \(Lists\)
 Below is the header
 it does say:
 
 Received: from Diaby [216.226.209.71] by cefib.com
   (SMTPD32-7.15) id AC0967A0288; Fri, 27 Jun 2003 18:25:13 +
 
 Doesn't this mean this is NOT an imail/webmessaging mail ?
 so why was it not scanned by declude ? no declude virus or junkmail
headers
 were added
 
 Received: from Diaby [216.226.209.71] by cefib.com
   (SMTPD32-7.15) id AC0967A0288; Fri, 27 Jun 2003 18:25:13 +
 From:  [EMAIL PROTECTED]
 Subject:  See todays hottest stars in their most intimate moments
 MIME-Version: 1.0
 Content-Type: multipart/mixed; boundary=--8SXJ1Q6JOLFJSQ
 Message-Id: [EMAIL PROTECTED]
 Date: Fri, 27 Jun 2003 19:11:25 +
 X-RCPT-TO: [EMAIL PROTECTED]
 Status: U
 X-UIDL: 352739436

Can you find that message in the Imail log, find what the Imail file name is
and post a log snippet of it?

John Tolmachoff MCSE CSSA
Engineer/Consultant
eServices For You
www.eservicesforyou.com


---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.


Re: [Declude.Virus] ban ext not working

2003-06-27 Thread Serge
attached are the 2 part of imail log file, receiving and delivering
too long, to many recepients
maybe thats why it went thru ?

banext did not work (it usualy works).
fprot did not catch bugbear, it does when i resend the same message !
no declude junkmail or virus headers added.

any help, hints, ... appreciated
thanks in advance




- Original Message -
From: John Tolmachoff (Lists) [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Saturday, June 28, 2003 12:20 AM
Subject: RE: [Declude.Virus] ban ext not working


 Below is the header
 it does say:

 Received: from Diaby [216.226.209.71] by cefib.com
   (SMTPD32-7.15) id AC0967A0288; Fri, 27 Jun 2003 18:25:13 +

 Doesn't this mean this is NOT an imail/webmessaging mail ?
 so why was it not scanned by declude ? no declude virus or junkmail
headers
 were added

 Received: from Diaby [216.226.209.71] by cefib.com
   (SMTPD32-7.15) id AC0967A0288; Fri, 27 Jun 2003 18:25:13 +
 From:  [EMAIL PROTECTED]
 Subject:  See todays hottest stars in their most intimate moments
 MIME-Version: 1.0
 Content-Type: multipart/mixed; boundary=--8SXJ1Q6JOLFJSQ
 Message-Id: [EMAIL PROTECTED]
 Date: Fri, 27 Jun 2003 19:11:25 +
 X-RCPT-TO: [EMAIL PROTECTED]
 Status: U
 X-UIDL: 352739436

Can you find that message in the Imail log, find what the Imail file name is
and post a log snippet of it?

John Tolmachoff MCSE CSSA
Engineer/Consultant
eServices For You
www.eservicesforyou.com


---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.



20030627 182419 127.0.0.1   SMTPD (067A0288) [216.226.209.71] helo Diaby
20030627 182419 127.0.0.1   SMTPD (067A0288) [216.226.209.71] MAIL FROM:[EMAIL 
PROTECTED]

20030627 182421 127.0.0.1   SMTPD (067A0288) [216.226.209.71] RCPT TO:[EMAIL 
PROTECTED]
20030627 182421 127.0.0.1   SMTPD (067A0288) [216.226.209.71] RCPT TO:[EMAIL 
PROTECTED]
20030627 182422 127.0.0.1   SMTPD (067A0288) [216.226.209.71] RCPT TO:[EMAIL 
PROTECTED]

20030627 182423 127.0.0.1   SMTPD (067A0288) [216.226.209.71] RCPT TO:[EMAIL 
PROTECTED]
20030627 182424 127.0.0.1   SMTPD (067A0288) [216.226.209.71] RCPT TO:[EMAIL 
PROTECTED]
20030627 182425 127.0.0.1   SMTPD (067A0288) [216.226.209.71] RCPT TO:[EMAIL 
PROTECTED]
20030627 182425 127.0.0.1   SMTPD (067A0288) [216.226.209.71] RCPT TO:[EMAIL 
PROTECTED]
20030627 182426 127.0.0.1   SMTPD (067A0288) [216.226.209.71] RCPT TO:[EMAIL 
PROTECTED]
20030627 182427 127.0.0.1   SMTPD (067A0288) [216.226.209.71] RCPT TO:[EMAIL 
PROTECTED]
20030627 182427 127.0.0.1   SMTPD (067A0288) [216.226.209.71] RCPT TO:[EMAIL 
PROTECTED]
20030627 182428 127.0.0.1   SMTPD (067A0288) [216.226.209.71] RCPT TO:[EMAIL 
PROTECTED]
20030627 182428 127.0.0.1   SMTPD (067A0288) [216.226.209.71] RCPT TO:[EMAIL 
PROTECTED]
20030627 182428 127.0.0.1   SMTPD (067A0288) [216.226.209.71] RCPT TO:[EMAIL 
PROTECTED]
20030627 182429 127.0.0.1   SMTPD (067A0288) [216.226.209.71] RCPT TO:[EMAIL 
PROTECTED]
20030627 182429 127.0.0.1   SMTPD (067A0288) [216.226.209.71] RCPT TO:[EMAIL 
PROTECTED]
20030627 182429 127.0.0.1   SMTPD (067A0288) [216.226.209.71] RCPT TO:[EMAIL 
PROTECTED]
20030627 182429 127.0.0.1   SMTPD (067A0288) [216.226.209.71] RCPT TO:[EMAIL 
PROTECTED]
20030627 182430 127.0.0.1   SMTPD (067A0288) [216.226.209.71] RCPT TO:[EMAIL 
PROTECTED]

20030627 182430 127.0.0.1   SMTPD (067A0288) [216.226.209.71] RCPT TO:[EMAIL 
PROTECTED]
20030627 182430 127.0.0.1   SMTPD (067A0288) [216.226.209.71] RCPT TO:[EMAIL 
PROTECTED]
20030627 182430 127.0.0.1   SMTPD (067A0288) [216.226.209.71] RCPT TO:[EMAIL 
PROTECTED]
20030627 182430 127.0.0.1   SMTPD (067A0288) [216.226.209.71] RCPT TO:[EMAIL 
PROTECTED]
20030627 182431 127.0.0.1   SMTPD (067A0288) [216.226.209.71] RCPT TO:[EMAIL 
PROTECTED]
20030627 182431 127.0.0.1   SMTPD (067A0288) [216.226.209.71] RCPT TO:[EMAIL 
PROTECTED]
20030627 182431 127.0.0.1   SMTPD (067A0288) [216.226.209.71] RCPT TO:[EMAIL 
PROTECTED]
20030627 182431 127.0.0.1   SMTPD (067A0288) [216.226.209.71] RCPT TO:[EMAIL 
PROTECTED]
20030627 182431 127.0.0.1   SMTPD (067A0288) [216.226.209.71] RCPT TO:[EMAIL 
PROTECTED]
20030627 182431 127.0.0.1   SMTPD (067A0288) [216.226.209.71] RCPT TO:[EMAIL 
PROTECTED]
20030627 182431 127.0.0.1   SMTPD (067A0288) [216.226.209.71] RCPT TO:[EMAIL 
PROTECTED]
20030627 182432 127.0.0.1   SMTPD (067A0288) [216.226.209.71] RCPT TO:[EMAIL 
PROTECTED]
20030627 182432 127.0.0.1   SMTPD (067A0288) [216.226.209.71] RCPT TO:[EMAIL 
PROTECTED]
20030627 182432 127.0.0.1   SMTPD (067A0288) [216.226.209.71] RCPT TO:[EMAIL 
PROTECTED]
20030627 182432 127.0.0.1   SMTPD (067A0288) [216.226.209.71] RCPT TO:[EMAIL

Re: [Declude.Virus] ban ext not working

2003-06-23 Thread R. Scott Perry

i have been getting since saturday many attachement that were supposed to be
banned
declude is still intercepting vulnaribilities, but banned extension, and
even viruses are going thru (maybe corrupted viruses, but they were caught
by local norton av)
I assume these were getting blocked before Saturday?

Can you reproduce the problem by sending an attachment with the appropriate 
file type?

Did you make any changes to the \IMail\Declude\virus.cfg file, or upgrade 
Declude about the same time this happened?

   -Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers.
Declude Virus: Catches known viruses and is the leader in mailserver 
vulnerability detection.
Find out what you have been missing: Ask for a free 30-day evaluation.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.


Re: [Declude.Virus] ban ext not working

2003-06-23 Thread Serge
i did upgrade to 1.70 from 1.65 few days before


- Original Message -
From: Serge [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Monday, June 23, 2003 5:07 PM
Subject: Re: [Declude.Virus] ban ext not working


 no changes lately
 sent mbx file and cfg files to [EMAIL PROTECTED]


 - Original Message -
 From: R. Scott Perry [EMAIL PROTECTED]
 To: [EMAIL PROTECTED]
 Sent: Monday, June 23, 2003 4:30 PM
 Subject: Re: [Declude.Virus] ban ext not working


 
  i have been getting since saturday many attachement that were supposed
to
 be
  banned
  declude is still intercepting vulnaribilities, but banned extension,
and
  even viruses are going thru (maybe corrupted viruses, but they were
 caught
  by local norton av)
 
  I assume these were getting blocked before Saturday?
 
  Can you reproduce the problem by sending an attachment with the
 appropriate
  file type?
 
  Did you make any changes to the \IMail\Declude\virus.cfg file, or
upgrade
  Declude about the same time this happened?
 
  -Scott
  ---
  Declude JunkMail: The advanced anti-spam solution for IMail mailservers.
  Declude Virus: Catches known viruses and is the leader in mailserver
  vulnerability detection.
  Find out what you have been missing: Ask for a free 30-day evaluation.
 
  ---
  [This E-mail was scanned for viruses by Declude Virus
 (http://www.declude.com)]
 
  ---
  This E-mail came from the Declude.Virus mailing list.  To
  unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
  type unsubscribe Declude.Virus.The archives can be found
  at http://www.mail-archive.com.
 


 ---
 [This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

 ---
 This E-mail came from the Declude.Virus mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.Virus.The archives can be found
 at http://www.mail-archive.com.



---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.


Re: [Declude.Virus] ban ext not working

2003-06-23 Thread R. Scott Perry

no changes lately
sent mbx file and cfg files to [EMAIL PROTECTED]
They haven't arrived yet -- could you try sending them again?

   -Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers.
Declude Virus: Catches known viruses and is the leader in mailserver 
vulnerability detection.
Find out what you have been missing: Ask for a free 30-day evaluation.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.


Re: [Declude.Virus] ban ext not working

2003-06-23 Thread Serge
sorry i sent the file to the list
appologize

- Original Message -
From: R. Scott Perry [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Monday, June 23, 2003 5:29 PM
Subject: Re: [Declude.Virus] ban ext not working



 no changes lately
 sent mbx file and cfg files to [EMAIL PROTECTED]

 They haven't arrived yet -- could you try sending them again?

 -Scott
 ---
 Declude JunkMail: The advanced anti-spam solution for IMail mailservers.
 Declude Virus: Catches known viruses and is the leader in mailserver
 vulnerability detection.
 Find out what you have been missing: Ask for a free 30-day evaluation.

 ---
 [This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

 ---
 This E-mail came from the Declude.Virus mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.Virus.The archives can be found
 at http://www.mail-archive.com.



---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.