NOD32 v2 question
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi T'Buddlers, I've been asked a question off-list and wondered if anyone here knows the answer. NOD32 have just released v2, but the TB plug-in isn't working right when using it to check outbound mail with attachments. Is there a way to configure it to work correctly? - -- Cheers -- .\\arck D Pearlstone -- List moderator TB! v1.63 Beta/11 on Windows XP 5.1.2600 Service Pack 1 -BEGIN PGP SIGNATURE- Version: PGPsdk version 1.7.1 (C) 1997-1999 Network Associates, Inc. and its affiliated companies. iQA/AwUBPw6KHznkJKuSnc2gEQIH2wCg4P7mEB7S/72sd6gU5bzuWcpG15QAoMlC u17WfTtMJK3B3cKsT7LZEB5F =v6f0 -END PGP SIGNATURE- Current version is 1.62r | Using TBUDL information: http://www.silverstones.com/thebat/TBUDLInfo.html
Re: NOD32 v2 question
On Friday, July 11, 2003 at 10:57 AM, Marck wrote: NOD32 have just released v2, but the TB plug-in isn't working right when using it to check outbound mail with attachments. Is there a way to configure it to work correctly? Hi Marck, I'm using NOD32 v2 and to the best of my knowledge, there is no need for a plug-in. IMON is automatically set to listen on port 110. I would suggest looking in the help file that comes with NOD32 as there are directions on how to set up IMON. For the paranoid (me), there is an option that will append a line to each e-mail letting you know it's been scanned. I used this to make sure all of my accounts were getting scanned then turned it off. This is what is appended at the bottom of the e-mail. __ NOD32 1.457 (20030710) Information __ This message was checked by NOD32 Antivirus System. http://www.nod32.com -- Best Regards, Terry Using The Bat! v1.62r on Windows 2000 5.0 Build 2195 Service Pack 3 Current version is 1.62r | Using TBUDL information: http://www.silverstones.com/thebat/TBUDLInfo.html
Re: NOD32 v2 question
On Friday, July 11, 2003 at 10:57 AM, Marck wrote: NOD32 have just released v2, but the TB plug-in isn't working right when using it to check outbound mail with attachments. Is there a way to configure it to work correctly? Oops. Clearly, I didn't read your message fully. Sorry about that. I'm off to work on my listening and reading skills now. :) -- Best Regards, Terry Using The Bat! v1.62r on Windows 2000 5.0 Build 2195 Service Pack 3 Current version is 1.62r | Using TBUDL information: http://www.silverstones.com/thebat/TBUDLInfo.html
Re: NOD32 v2 question
Hello Marck, Friday, July 11, 2003, 5:57:47 AM, you wrote: MDP NOD32 have just released v2, but the TB plug-in isn't working right MDP when using it to check outbound mail with attachments. Is there a MDP way to configure it to work correctly? There is no need to use the plug in. It scans the mail before it gets to the BAT, and you have the option of attaching notification to e-mail (all, none, or only infected). I am using the infected notification and with the BAT's filter, I can isolate the infected e-mail into its own folder. I can tell you it works well (caught numerous viruses so far last several weeks), and it's really convenient. -- Best regards, Kennethmailto:[EMAIL PROTECTED] Current version is 1.62r | Using TBUDL information: http://www.silverstones.com/thebat/TBUDLInfo.html
Re: NOD32 v2 question
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi Kenneth, @11-Jul-2003, 06:38 -0400 (11:38 UK time) Kenneth S. Rhee [KSR] in mid:[EMAIL PROTECTED] said to Marck: MDP NOD32 have just released v2, but the TB plug-in isn't working MDP right when using it to check outbound mail with attachments. MDP Is there a way to configure it to work correctly? KSR There is no need to use the plug in. It scans the mail before KSR it gets to the BAT, and you have the option of attaching KSR notification to e-mail (all, none, or only infected). Yes, it's working well for inbound mail. It's the outbound mail check that's failing. - -- Cheers -- .\\arck D Pearlstone -- List moderator TB! v1.63 Beta/11 on Windows XP 5.1.2600 Service Pack 1 -BEGIN PGP SIGNATURE- Version: PGPsdk version 1.7.1 (C) 1997-1999 Network Associates, Inc. and its affiliated companies. iQA/AwUBPw6WzTnkJKuSnc2gEQKrvgCg+4P8tvobFI/JI28sMF3oR7oEWi8AoObS 5a3sreACz5erCbz3nZfrRCJs =+GhX -END PGP SIGNATURE- Current version is 1.62r | Using TBUDL information: http://www.silverstones.com/thebat/TBUDLInfo.html
Re: NOD32 v2 question
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi Terry, @11-Jul-2003, 11:34 Terry [T] in mid:[EMAIL PROTECTED] said to Marck: NOD32 have just released v2, but the TB plug-in isn't working right when using it to check outbound mail with attachments. Is there a way to configure it to work correctly? T Oops. Clearly, I didn't read your message fully. Sorry about T that. I'm off to work on my listening and reading skills now. :) No problem. Thanks for trying :-). - -- Cheers -- .\\arck D Pearlstone -- List moderator TB! v1.63 Beta/11 on Windows XP 5.1.2600 Service Pack 1 -BEGIN PGP SIGNATURE- Version: PGPsdk version 1.7.1 (C) 1997-1999 Network Associates, Inc. and its affiliated companies. iQA/AwUBPw6W6TnkJKuSnc2gEQLMfQCfVrm8Vbyt0c7wmeV1x6VD+tr7wbgAn1EZ 85yUpV5RMY0W06T9zbVtS4at =9UMB -END PGP SIGNATURE- Current version is 1.62r | Using TBUDL information: http://www.silverstones.com/thebat/TBUDLInfo.html
Re: NOD32 v2 question
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Kenneth S. Rhee, [KSR] wrote: KSR There is no need to use the plug in. It scans the mail before it KSR gets to the BAT, and you have the option of attaching notification KSR to e-mail (all, none, or only infected). I am using the infected KSR notification and with the BAT's filter, I can isolate the infected KSR e-mail into its own folder. I can tell you it works well (caught KSR numerous viruses so far last several weeks), and it's really KSR convenient. v2's IMON doesn't check outbound mail and only inbound mail. Also, POP encryption using TLS is becoming popular so mail would be encrypted at the Winsock level which is where IMON works. The plugin would therefore be needed in such a situation. So the plug-in isn't required if you're not using POP encryption. AMON will prevent outbound mail infection provided attachments are added to mail from explorer and infected attachments aren't handled within TB! itself, i.e., the infected mail is redirected/forwarded after receipt. - -- -= allie_M =- | List Moderator _ -BEGIN PGP SIGNATURE- Version: PGP SDK 3.0.2 iQA/AwUBPw6XJ1fJ62ArBxfiEQIyxACdG/ckDg6ZbNbMl2zvvPtqX3v+mOwAni97 W0X9AdhrkMIQmIhFXod7yYw7 =U5ox -END PGP SIGNATURE- Current version is 1.62r | Using TBUDL information: http://www.silverstones.com/thebat/TBUDLInfo.html
Re[2]: NOD32 v2 question
Hello Marck, Friday, July 11, 2003, 6:51:54 AM, you wrote: MDP Yes, it's working well for inbound mail. It's the outbound mail MDP check that's failing. Sorry about that. You still don't need the plug in. The AMON will catch the virus infected file if you try to attach the file using the BAT's attach a file command. Try one with an infected file (I usually use Eicar.com for testing), and the alert will show up. -- Best regards, Kennethmailto:[EMAIL PROTECTED] Current version is 1.62r | Using TBUDL information: http://www.silverstones.com/thebat/TBUDLInfo.html
Re: NOD32 v2 question
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi Kenneth, @11-Jul-2003, 07:06 -0400 (12:06 UK time) Kenneth S. Rhee [KSR] in mid:[EMAIL PROTECTED] said to Marck: MDP Yes, it's working well for inbound mail. It's the outbound MDP mail check that's failing. KSR Sorry about that. You still don't need the plug in. The AMON KSR will catch the virus infected file if you try to attach the KSR file using the BAT's attach a file command. KSR Try one with an infected file (I usually use Eicar.com for KSR testing), and the alert will show up. It's not for me - I use AVG. It's for someone who wants his outbound messages certified virus free by NOD. NOD is saying that the attachment is not valid and stalling the mail send. - -- Cheers -- .\\arck D Pearlstone -- List moderator TB! v1.63 Beta/11 on Windows XP 5.1.2600 Service Pack 1 -BEGIN PGP SIGNATURE- Version: PGPsdk version 1.7.1 (C) 1997-1999 Network Associates, Inc. and its affiliated companies. iQA/AwUBPw6fLjnkJKuSnc2gEQKMiACgkAg87JbwXywgvk7p4tHZbU2UZdwAoJL7 juhkpaWyYZePUzr2cN8Ggsw5 =nSxW -END PGP SIGNATURE- Current version is 1.62r | Using TBUDL information: http://www.silverstones.com/thebat/TBUDLInfo.html
Re[2]: NOD32 v2 question
On Friday, July 11, 2003 at 11:52 AM, Marck wrote: NOD32 have just released v2, but the TB plug-in isn't working right when using it to check outbound mail with attachments. Is there a way to configure it to work correctly? Is there a new plug-in for v2? If so, do you know where I can download it from? If not, I was under the impression that the old plug-in didn't work with v2. Does it? -- Terry Using The Bat! v1.62r on Windows 2000 5.0 Build 2195 Service Pack 3 Current version is 1.62r | Using TBUDL information: http://www.silverstones.com/thebat/TBUDLInfo.html
Re[2]: NOD32 v2 question
Hello Marck, Friday, July 11, 2003, 7:27:38 AM, you wrote: MDP It's not for me - I use AVG. It's for someone who wants his MDP outbound messages certified virus free by NOD. NOD is saying that MDP the attachment is not valid and stalling the mail send. I see. Interesting. This has never happened to me with a good attachment. I believe the current plug-in is not compatible with v. 2. As I said, I have never had a need for the plug-in after I upgraded to v.2. -- Best regards, Kennethmailto:[EMAIL PROTECTED] Current version is 1.62r | Using TBUDL information: http://www.silverstones.com/thebat/TBUDLInfo.html
Re: NOD32 v2 question
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi Terry, @11-Jul-2003, 13:37 Terry [T] in mid:[EMAIL PROTECTED] said to Marck: NOD32 have just released v2, but the TB plug-in isn't working right when using it to check outbound mail with attachments. Is there a way to configure it to work correctly? T Is there a new plug-in for v2? I don't think so. I haven't seen one anywhere. T If not, I was under the impression that the old plug-in didn't T work with v2. Does it? It seems to work for incoming mail, just not for outbound. That's why I was asking the question in the first place. - -- Cheers -- .\\arck D Pearlstone -- List moderator TB! v1.63 Beta/11 on Windows XP 5.1.2600 Service Pack 1 -BEGIN PGP SIGNATURE- Version: PGPsdk version 1.7.1 (C) 1997-1999 Network Associates, Inc. and its affiliated companies. iQA/AwUBPw66JznkJKuSnc2gEQIJzgCgpvNIqk5JKTaFHvnKCm42mX9Z+5cAoJVm 3IgXv/MjN/KZq4CJ4VLTFpQc =6Vm1 -END PGP SIGNATURE- Current version is 1.62r | Using TBUDL information: http://www.silverstones.com/thebat/TBUDLInfo.html
Re: NOD32 v2 question
Sorry about that. You still don't need the plug in. The AMON will catch the virus infected file if you try to attach the file using the BAT's attach a file command. How about forwarding an an infected message including the attachment? A virus could have been received and not detected prior to a signature update. -- Ravi (http://shell-shocked.org) Windows Error: 004 - Erroneous error. Nothing wrong here. Move right along.. Current version is 1.62r | Using TBUDL information: http://www.silverstones.com/thebat/TBUDLInfo.html
Re[2]: NOD32 v2 question
On Friday, July 11, 2003 at 2:22 PM, Marck wrote: It seems to work for incoming mail, just not for outbound. That's why I was asking the question in the first place. It wasn't clear to me that you were using the old plug-in. Wishful thinking on my part that there was a new one. :) Thanks for clarifying. -- Best Regards, Terry Using The Bat! v1.62r on Windows 2000 5.0 Build 2195 Service Pack 3 Current version is 1.62r | Using TBUDL information: http://www.silverstones.com/thebat/TBUDLInfo.html
Re[2]: NOD32 v2 question
Hello ravi, Friday, July 11, 2003, 10:14:43 AM, you wrote: r How about forwarding an an infected message including the r attachment? r A virus could have been received and not detected prior to a r signature update. Assuming you are forwarding a message that has already been scanned, it should have been caught during incoming. If it didn't, even outgoing scan won't catch it. -- Best regards, Kennethmailto:[EMAIL PROTECTED] Current version is 1.62r | Using TBUDL information: http://www.silverstones.com/thebat/TBUDLInfo.html
Re: NOD32 v2 question
r A virus could have been received and not detected prior r to a signature update. Assuming you are forwarding a message that has already been scanned, it should have been caught during incoming. If it didn't, even outgoing scan won't catch it. As I said, one could have received a virus before the virus signature was updated to detect it. -- Ravi (http://shell-shocked.org) If the shoe fits, buy it - Imelda Marcos. Current version is 1.62r | Using TBUDL information: http://www.silverstones.com/thebat/TBUDLInfo.html
Re[2]: NOD32 v2 question
Hello ravi, Friday, July 11, 2003, 11:23:18 AM, you wrote: r As I said, one could have received a virus before the virus r signature was updated to detect it. Yes, I got it. That would be possible, but likely for me. I would really have to be out of my mind to forward a message to someone with an attachment that I didn't either know about or didn't open to read/check. -- Best regards, Kennethmailto:[EMAIL PROTECTED] Current version is 1.62r | Using TBUDL information: http://www.silverstones.com/thebat/TBUDLInfo.html
Re: NOD32 v2 question
Marck- I use NOD32 *without* the plugin and it seems to work just fine. I don't scan outgoing emails, though, and there's a long-standing controversy about the value of doing this. If that's the real crux of the matter, then I can't be of much help. -Mark Wieder Using The Bat! v1.63 Beta/7 on Windows 2000 5.0 Build 2195 Service Pack 2 -- Current version is 1.62r | Using TBUDL information: http://www.silverstones.com/thebat/TBUDLInfo.html
Re: NOD32 v2 question
Marck- Friday, July 11, 2003, 4:27:38 AM, you wrote: MDP It's not for me - I use AVG. It's for someone who wants his MDP outbound messages certified virus free by NOD. NOD is saying that MDP the attachment is not valid and stalling the mail send. humor 1. Add a line to the template that says certified virus free. 2. Disable the plugin 3. Chill /humor -Mark Wieder Using The Bat! v1.63 Beta/7 on Windows 2000 5.0 Build 2195 Service Pack 2 -- Current version is 1.62r | Using TBUDL information: http://www.silverstones.com/thebat/TBUDLInfo.html
