What the code to inklude the complete header in the mail to the postmaster ?
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type
I have this in recip.eml
SKIPIFVIRUSNAMEHAS Klez
SKIPIFVIRUSNAMEHAS Bugbear
but it still sends out the mail why and what to do ?
Med vennlig hilsen
Benny Samuelsen
ISPhuset Visual Web Norge Da
tlf +47 32 26 02 00
fax +47 32 81 13 55
http://isphuset.info / http://isphuset.no
---
[This E
yes and its working on 100 % of klez and 99 % of bugbear but some still slips by...
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of R. Scott Perry
Sent: 11. oktober 2002 14:10
To: [EMAIL PROTECTED]
Subject: Re: [Declude.Virus] SKIPIFVIRUSNAME
I mean the message is sent to the recipient i a few cases like this
Date: Thu, 10 Oct 2002 21:09:53 +0200
Message-Id: [EMAIL PROTECTED]
Mime-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable
From: hostmaster [EMAIL PROTECTED]
Reply-To: [EMAIL
Same her we have caught about 500 of it today so far
Benny
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Ken Lizotte
Sent: 1. oktober 2002 17:22
To: [EMAIL PROTECTED]
Subject: DSN:Re: [Declude.Virus] Bugbear forged?
Hello All,
Just to
It looks like its creating sender adresses...
I get a lot of returned mail with recipient unknown when we send out the mail to sender
like this
Your message
To: [EMAIL PROTECTED]
Subject: Virusadvarsel / virusvarning
Sent:Wed, 2 Oct 2002 08:01:13 +0200
did not reach the
Before u do this consider the following
We had an incident with F-prot where the def files went corrupt, because of this ALL
mail was dumped in the virus dir about 20 000
before we got an alarm about something went wrong. If you by default tell it to
delete the virus u cant reinsert them in
get some through here with W32/Magistr.32768@mm
fprot on my desktop catch it but declude let them slip throug same def files
Benny
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just
latest declude
latest def on F-rot an latest engine still slipping trough
Benny
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of R. Scott Perry
Sent: 6. mai 2002 16:33
To: [EMAIL PROTECTED]
Subject: Re: [Declude.Virus] new virus ?
Having the
hmmm get through on 3.11b but upgraded til 3.12 and that got it right away
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of R. Scott Perry
Sent: 6. mai 2002 17:19
To: [EMAIL PROTECTED]
Subject: RE: [Declude.Virus] new virus ?
latest declude
well i think its a backup thing because I had onnly been there for a week and I got
the kick there too
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of R. Scott Perry
Sent: 26. april 2002 14:19
To: [EMAIL PROTECTED]
Subject: Re: [Declude.Virus] OT:
Hi
Is this possible:
On the gateway server i want to recieve the mail and when its passed to my mailserver
it will be scanned by declude.
So that the server just recieve the mail without scanning and first when it pass it to
the other server it will be scanned on the
way out ?
Benny
---
Yes i know that
but what i wanted was that Imail recived it on the gateway and on the way out it to
the mailserver it would scan it.
this for speeding up the receiving
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of [EMAIL PROTECTED]
Sent: 25.
is there anythin on the mailserver i can turn off when i choose to use a gateway ?
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of R. Scott Perry
Sent: 19. april 2002 16:11
To: [EMAIL PROTECTED]
Subject: RE: [Declude.Virus] Trying here to in case
Hi
what do i vahe to have in declude to se the virusname ?
after setting prescan to on and loglewel to low its no longer tellig the virusname in
the virlog file
Benny
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
This E-mail came from the Declude.Virus
.
Jim Rooth
Klotron, INC.
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of ISPhuset Visual
Web Norge
Sent: Wednesday, April 17, 2002 5:07 PM
To: [EMAIL PROTECTED]
Subject: [Declude.Virus] DORKZTL:Security warning
After endless nightmares here
upgrading to a new mailserver tonight i wonder what about f-prot for
windows with command line is it working the same way with declude or is there
anythig i should look up for ?
Benny
yeah i
akready have those was just curios about the windows updater would
work
-Original Message-From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On
Behalf Of Dean ChanSent: 16. april 2002 19:39To:
[EMAIL PROTECTED]Subject: Re: [Declude.Virus] f-Prot
question
You
Trying
her because the Imail people couldn't or wouldn't give me any
answers
I have
an imail server with unlimited users and this looks like it has reached the
limit. So firstI have upgraded to a faster server, but then I am not sure
what to choose here, either a peeirng server based on
http://www.ipswitch.com/support/IMail/guide/imailug7/config11.html#4382
will following this guide do what you tell me below, and then the stupid question
where do place the Declude for scanning the mail ?
what i have today is
mailserveren.com with about 5000 virtual hosts all in this
But if my my primary mailserver are up and responding it will never reach the second ?
or are there something here i don't see
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of R. Scott Perry
Sent: 16. april 2002 22:27
To: [EMAIL PROTECTED]
Subject:
in this exampel will all outgoing mail allso be scanned ?
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of R. Scott Perry
Sent: 16. april 2002 22:27
To: [EMAIL PROTECTED]
Subject: RE: [Declude.Virus] f-Prot question
ok
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of R. Scott Perry
Sent: 16. april 2002 23:01
To: [EMAIL PROTECTED]
Subject: RE: [Declude.Virus] f-Prot question
in this exampel will all outgoing mail allso be scanned ?
When you run a
with around 150 000 users on a dual 933 with 1 gb ram, I get at lot of restart of smtp
service. and its very slow when i send mail
through the server anyone her having a good idea of how to speed it up
Benny
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
# The in the LOGFILE option gets replaced with the month/date
LOGFILE E:\virus\vir.log
LOGLEVELHIGH
CONSOLE OFF
# SCANFILE is the location of the command-line virus scanner. Note that it
# must include the full path. VIRUSCODE is the code that scanner
the strange thing here is that its using a lot of cpu but nearly no ram at all about
200 mb
but my cpu is on 95 or more all the time
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of R. Scott Perry
Sent: 12. april 2002 15:35
To: [EMAIL PROTECTED]
iwebmsg.exe with around 34
then its declude or smtp32 switching
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of R. Scott Perry
Sent: 12. april 2002 16:11
To: [EMAIL PROTECTED]
Subject: RE: [Declude.Virus] slow smtp
do i have to restart or is
is it possible to drop scanning of large files for eksampel more than 2 mb
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of R. Scott Perry
Sent: 12. april 2002 16:11
To: [EMAIL PROTECTED]
Subject: RE: [Declude.Virus] slow smtp
do i have to
whats the fast command to find the amount of mails allways forget it
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of R. Scott Perry
Sent: 12. april 2002 16:23
To: [EMAIL PROTECTED]
Subject: RE: [Declude.Virus] slow smtp
iwebmsg.exe with
a litlle off topic but how will declude work if I put up a second Imailserver which
shall be a relay server
Benny
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to
ok that was the answer I was looking for
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of R. Scott Perry
Sent: 4. april 2002 18:24
To: [EMAIL PROTECTED]
Subject: RE: [Declude.Virus] Mail relaying
no what i want is that if the primary
I am going to build a new server any one her having a good ida of how big it should be
for a server running about 50 - 8 mail
accounts and still growing ( will be over 120 000 in 5 months) spread over 7 - 10 000
domains
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL
http://www.f-secure.com/download-purchase/updates_manual.shtml#latest
this is the only place i have been apple to get an updated version of the def files
for the dos version, anybody else having the
same problems ?
Regards / Med vennlig hilsen
Benny Samuelsen
ISPhuset Visual Web Norge Da
i am using f-prot but they are not updated with the lates def for the virus in alert
today
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of R. Scott Perry
Sent: 14. mars 2002 15:46
To: [EMAIL PROTECTED]
Subject: Re: [Declude.Virus] F-prot def files
no on the bottom the page there is a section for f-prot dos version
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of R. Scott Perry
Sent: 14. mars 2002 15:46
To: [EMAIL PROTECTED]
Subject: Re: [Declude.Virus] F-prot def files
are
dated 3/7, but the downloaded files are actually dated 3/14. Guess there web
guy hasn't heard of cgi scripts yet.
The update that covers fbound/impat/zircon was posted sometime between 4-5am
EST.
Jerry
- Original Message -
From: Visual Web Norge [EMAIL PROTECTED]
To: [EMAIL
/14. Guess there web
guy hasn't heard of cgi scripts yet.
The update that covers fbound/impat/zircon was posted sometime between 4-5am
EST.
Jerry
- Original Message -
From: Visual Web Norge [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Thursday, March 14, 2002 10:16 AM
Subject
through a caching proxy? What file are you downloading? I just
checked all three ftp.f-prot.com IPs, and all have the 3/14 defs inside the
def zip file.
Jerry
- Original Message -
From: Visual Web Norge [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Thursday, March 14, 2002 10:38 AM
- Original Message -
From: Visual Web Norge [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Thursday, March 14, 2002 10:38 AM
Subject: RE: [Declude.Virus] F-prot def files
ftp.f-prot.com/pub
shows a .zip from today but when you open the file it contains a file dated
in january
No downloaded the 1.43 and its still passing through
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of R. Scott Perry
Sent: 12. mars 2002 21:02
To: [EMAIL PROTECTED]
Subject: Re: [Declude.Virus] v1.43 released
[NOTE: Your mail server
well it says 3.11b on topp so i believe thats not the problem
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of R. Scott Perry
Sent: 12. mars 2002 22:15
To: [EMAIL PROTECTED]
Subject: RE: [Declude.Virus] v1.43 released
how do i see the
I can recreate the file sa that it will get through, what mailboks do u want it sent
to ?
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of R. Scott Perry
Sent: 12. mars 2002 22:15
To: [EMAIL PROTECTED]
Subject: RE: [Declude.Virus] v1.43 released
just got the message that it cached the mail with a virus from your server
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of R. Scott Perry
Sent: 12. mars 2002 22:36
To: [EMAIL PROTECTED]
Subject: RE: [Declude.Virus] v1.43 released
I can
: 3063
Regards
Med vennlig hilsen
Benny Samuelsen
ISPhuset Visual Web Norge Da
tlf +47 32 26 02 00
fax +47 32 81 13 55
http://isphuset.info / http://isphuset.no
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
This E-mail came from the Declude.Virus mailing list
maybe but its both on sending and receiving and thats what i dont understand
-Opprinnelig melding-
Fra: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]Pa vegne av R. Scott Perry
Sendt: 29. januar 2002 18:13
Til: [EMAIL PROTECTED]
Emne: Re: [Declude.Virus] OFFTOPIC but an imail problem
Nop that didn't help on my new def files
looks like that its not caching all or only a few
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of R. Scott Perry
Sent: 28. januar 2002 18:55
To: [EMAIL PROTECTED]
Subject: Re: [Declude.Virus] MY Party
how do i bann i certain file ?
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Paul Ingram
Sent: 28. januar 2002 19:41
To: [EMAIL PROTECTED]
Subject: RE: [Declude.Virus] MY Party
Do you have script already for doing the daily .dat update.
thanks
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Chris Hunt
Sent: 28. januar 2002 20:04
To: [EMAIL PROTECTED]
Subject: RE: [Declude.Virus] MY Party
In your virus.cfg add these (edit to suit)
SKIPEXT GIF
SKIPEXT PDF
Hi
got a serius problem with the 3.11b version it slipped through a lot of
virus tonight, I downloaded the version for Europe, this morning i changed
back to the 3.11a from the US based ftp and voila i started imedialy caching
virus, anything special we have to look up for in the new engine ?
We are running on W2k and doesnt hvae any problems at all
Benny
Visual Web Norge
http://isphuset.no
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Serge Dergham
Sent: 16. desember 2001 00:33
To: [EMAIL PROTECTED]
Subject: Re: [Declude.Virus] new server
most, if
not all of them were using Internet Explorer 3.0 .
- Original Message -
From: Visual Web Norge [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Saturday, December 01, 2001 2:40 PM
Subject: RE: RE: RE: [Declude.Virus] Virus Log File Analyzer
Ok do you have any clue about
i t be a
firewall problem ? I know 7.0.3 had a bug but
in 7.0.4 i should be fixed
Regards
Med vennlig hilsen
Benny Samuelsen
Visual Web Norge Da
tlf +47 32 26 02 00
fax +47 32 81 13 55
http://visual-web.no
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED
hmmm wonder vei i just get 0 but my logfile are around 100 MB ?
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Craig Gittens
Sent: 19. oktober 2001 19:20
To: [EMAIL PROTECTED]
Subject: RE: [Declude.Virus] Feature Clarification
That's more like it.
you have to type for ex. FIND ldeliver /C sys1019.txt
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Webmaster Oilfield
Directory
Sent: 19. oktober 2001 21:19
To: [EMAIL PROTECTED]
Subject: MISSING_REVERSE_DNS:RE: [Declude.Virus] Feature Clarification
Is it possible to
get the virus name listed in the virus.log ?
Regards
Med vennlig hilsenBenny SamuelsenVisual Web Norge
Datlf +47 32 26 02 00fax +47 32 81 13 55http://visual-web.no
Is this at new version of SirCam
came with this subject: homepage
and this text Hi!
You've got to see this page! It's really cool ;O)
and an attachnebt called homepage.htm.zlv with an icon showing a letter and
a lock on top of it ???
-Original Message-
From: [EMAIL PROTECTED]
sent to the asp
page.
Bruno Carlos flesk lda
- Original Message -
From: Visual Web Norge [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Saturday, July 28, 2001 6:41 AM
Subject: RE: [Declude.Virus] Feature Request in Declude
That will work. You can manually send the virus-infected file
thanks that was exactly what i wanted
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of R. Scott Perry
Sent: 28. juli 2001 16:08
To: [EMAIL PROTECTED]
Subject: RE: [Declude.Virus] Feature Request in Declude
if one of my customers has an email contaning
That will work. You can manually send the virus-infected file by moving
the D and Q files (each E-mail has two files; IE D1234567.SMD and
Q1234567.SMD) out of the \IMail\spool\virus directory, back into the
spool directory. They will go out on the next queue run, or you can use
the Send All
59 matches
Mail list logo
