RE: [sniffer] New virus...

2005-10-06 Thread John T (Lists)
No need to block zips, with Declude just add BANZIPEXTSON to your virus.cfg file since the payload is an exe within the zip and since we are all already banning executable files, correct? John T eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL

RE: [sniffer] New virus...

2005-10-06 Thread Colbeck, Andrew
I suppose it depends on just deep the sniffer signature goes... Previous viruses including Sober.* have come in waves, with variants that skirt all but the most intrusive antivirus blocking schemes. I submitted a sample to the Norman Sandbox, which turned up different information than the

RE: [sniffer] [Declude.JunkMail] 3.05.5 issues

2005-10-06 Thread Harry Vanderzand
Dual processor Harry Vanderzand inTown Internet Computer Services 11 Belmont Ave. W., Kitchener, ON,N2M 1L2 519-741-1222 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Andy Schmidt Sent: Wednesday, October 05, 2005 5:49 PM To:

[sniffer] 3.05.5 issues continued

2005-10-06 Thread Harry Vanderzand
Does anyone know the defaults for the declude.cfg settings below? WAITFORMAIL WAITFORTHREADS WAITBETWEENTHREADS I am still trying to tune my server. I have the max threads setting at 10 right now. It seems way to low for a dual processor 3.4Ghz Xeon machine. Yet any higher and

Re: [sniffer] New virus...

2005-10-06 Thread Darin Cox
That's only in Virus Pro, right? I don't think BANZIPEXTS is available in Standard or Lite. Darin. - Original Message - From: John T (Lists) [EMAIL PROTECTED] To: sniffer@SortMonster.com Sent: Thursday, October 06, 2005 3:01 AM Subject: RE: [sniffer] New virus... No need to block

RE: [sniffer] 3.05.5 issues continued

2005-10-06 Thread Barry@Declude
The default values you are looking for are: WAITFORMAIL3 WAITFORTHREADS 1500 WAITBETWEENTHREADS 1 Barry -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Harry Vanderzand Sent: Thursday, October 06, 2005 7:28 AM To:

RE: [sniffer] [Declude.JunkMail] 3.05.5 issues

2005-10-06 Thread Andy Schmidt
So this may be the known Declude problem with 3.x Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Harry Vanderzand Sent: Thursday, October 06, 2005 07:13 AM To:

Re: [sniffer] [Declude.Virus] Possible new virus

2005-10-06 Thread Darin Cox
Another possible variant overnight at 4:30AM ET. Same routing as the new Sober variant from yesterday, but different attachment: screen_photo.zip Darin. - Original Message - From: Darin Cox To: Declude.Virus@declude.com Sent: Wednesday, October 05, 2005 10:33 PM Subject:

Re: [sniffer] New virus...

2005-10-06 Thread Joe Wolf / Internet Specialists, LLC
If you are running your mail server only for yourself feel free to ban .exe's and .zip's. If you are providing mail services to others I STRONGLY suggest you consult an attorney that specializes in Internet related matters. There have been a couple of recent cases where ISP's have been held