Disregard my last message. If I had opened my eyes and read all my mail
first I would have see the answer.
Jeff Kratka
*
TymeWyse Internet
P.O.Box 84 - 110 Ecklund St., Canyonville, OR 97417
tel/fax: (541) 839-6027 - [EMAIL PROTECTED]
I have the line SKIPIFVIRUSNAMEHAS Vulnerability before the From: line with
4 other skip lines in my Recip.eml file but the Vulnerability seems to
have stopped working. We are getting a ton of SPAM that is failing the
Outlook vulnerabilities and customers are being notified. I am running
Declude
It doesn't do this all the time. McAfee's site states it often changes
the second letter of the username. Since at least for me Magistr isn't
that a frequent virus I have notification turned on for it because
it's rarely that a altered e-mail is coming. Those few bounces I can
handle instead of
-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Sheldon Koehler
Sent: Friday, May 17, 2002 11:01 AM
To: [EMAIL PROTECTED]
Subject: [Declude.Virus] SKIPIFVIRUSNAMEHAS
Just out of curiosity, what viruses are everyone blocking with the
SKIPIFVIRUSNAMEHAS to sender and recipient
Thanks everyone. I was just wondering what others were doing. We use:
recip.eml
SKIPIFVIRUSNAMEHAS Vulnerability
sender.eml
SKIPIFVIRUSNAMEHAS Vulnerability
SKIPIFVIRUSNAMEHAS Magistr
SKIPIFVIRUSNAMEHAS Hybris
SKIPIFVIRUSNAMEHAS Klez
We do not use the postmaster emails as some servers were
In the .eml file put in
SKIPIFVIRUSNAMEHAS W32/Klez
SKIPIFVIRUSNAMEHAS W32/SirCam
I wouldn't do the SirCam but definitely the Klez since it spoofs the
From address.
Thursday, May 09, 2002, 17:58:29 PM, you wrote:
W What is the format need to use SKIPIFVIRUSNAMEHAS
W Here is how my virus
What is the format need to use SKIPIFVIRUSNAMEHAS
Here is how my virus scanner reports a virus:
W32/Klez.h@MM virus !!!
W32/SirCam@MM virus !!!
You need to have SKIPIFVIRUSNAMEHAS, followed by one space or tab, and
text that appears within the virus name (part of the name is OK, and it is
: Thursday, May 09, 2002 4:18 PM
Subject: Re: [Declude.Virus] SKIPIFVIRUSNAMEHAS
In the .eml file put in
SKIPIFVIRUSNAMEHAS W32/Klez
SKIPIFVIRUSNAMEHAS W32/SirCam
I wouldn't do the SirCam but definitely the Klez since it spoofs the
From address.
Thursday, May 09, 2002, 17:58:29 PM, you wrote:
W
How does declude send notifications ?
It sends them using IMail's imail1.exe.
Can we use imail rules to delete some messages (ie: if to adress is
[EMAIL PROTECTED] ?)
I believe that the IMail rules will work on E-mail sent with imail1.exe, so
that should do the trick.
Here is our virus analisis for the last 2 days
our main problem is sircam from our customers
this has been the case for months , we tried everything we can think of to
make them clean their computers, it always come back, probably from hotmail,
..., accounts.
anyone have any hints ?
also, for
10 matches
Mail list logo
