I had tried to reprocess these messages as well, but they kept getting caught and moved back to the virus folder. I did the same (edit, reprocess, edit) so I was just curious how you handled it.
Thanks again! Todd From: supp...@declude.com [mailto:supp...@declude.com] On Behalf Of Scott Fisher Sent: Tuesday, November 16, 2010 3:06 PM To: declude.virus@declude.com Subject: RE: [Declude.Virus] EZIP files An email will get generated when they are blocked. I just give them the eyeball test. Generally they are mail that I'd expect from a vendor or partner. If they look to be legit, I move them to the imail\spool folder. If that doesn't take care of it, I'll change the virus.cfg and then reprocess and then change the virus.cfg. -----Original Message----- From: supp...@declude.com [mailto:supp...@declude.com] On Behalf Of Todd Richards Sent: Tuesday, November 16, 2010 2:50 PM To: declude.virus@declude.com Subject: RE: [Declude.Virus] EZIP files Thanks Scott. We aren't that big either. How do you manually process them? Do you go in and disable the block, reprocess the email, then put the block back? Todd From: supp...@declude.com [mailto:supp...@declude.com] On Behalf Of Scott Fisher Sent: Tuesday, November 16, 2010 10:28 AM To: declude.virus@declude.com Subject: RE: [Declude.Virus] EZIP files I'm pretty small (125 employees), so encrypted zip files are rare and they get blocked. I'll manually reprocess them after getting an alert email. -----Original Message----- From: supp...@declude.com [mailto:supp...@declude.com] On Behalf Of Todd Richards Sent: Tuesday, November 16, 2010 9:25 AM To: declude.virus@declude.com Subject: [Declude.Virus] EZIP files How many of you ban EZIP files via Declude? I have one that is stuck in the virus hold folder, and I am (by default) banning EZIP files. Just out of curiosity, I created one and sent it to Yahoo via my Hotmail account. It arrived with no problem. I have also had legitimate messages get stuck from other "vulnerabilities", which I finally disabled. I'd like to balance security without paranoia, if that's possible. Thanks! Todd --- [This E-mail was scanned by Declude] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned by Declude] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned by Declude] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned by Declude] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned by Declude] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com.
