Hi John,
What's the entry in the virus.cfg to enable this?
Thanks in advance.
SKIPIFVIRUSNAMEDOESNOTHAVE Vulnerability From: [EMAIL PROTECTED] To: %ALLRECIPS%,[EMAIL PROTECTED] Subject: We blocked an e-mail sent to you!
Delivery blocked: %ALLRECIPS%
The mail server for %LOCALHOST% scans each e-mail for Viruses, SPAM (Junk Mail) and e-mail vulnerabilities.
We caught an e-mail addressed to you that is formatted with %VIRUSNAME%, and have quarantined it for your protection.
If you recognize the below information as a valid e-mail that you want or should have received, please let us know. Otherwise, the e-mail will be deleted after 3 days.
FROM: %MAILFROM% TO: %ALLRECIPS% SUBJECT: %SUBJECT% Remote IP: %REMOTEIP%
DATE: %DATE% @ %TIME%
SPOOL FILE: %QUEUENAME%
Headers of the e-mail in question:
%HEADERS%
John Tolmachoff MCSE CSSA Engineer/Consultant eServices For You www.eservicesforyou.com
> -----Original Message----- > From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- > [EMAIL PROTECTED] On Behalf Of Frederick Samarelli > Sent: Monday, August 11, 2003 12:31 PM > To: [EMAIL PROTECTED] > Subject: Re: [Declude.JunkMail] Declude Virus Pro and Fprot (DOS) > > John. > > Would you mind sharing the vulnerability.eml message. > > Thanks > ----- Original Message ----- > From: "John Tolmachoff (Lists)" <[EMAIL PROTECTED]> > To: <[EMAIL PROTECTED]> > Sent: Monday, August 11, 2003 2:31 PM > Subject: RE: [Declude.JunkMail] Declude Virus Pro and Fprot (DOS) > > > I have Declude send out a vulnerablility.eml message. If the receiver > recognizes it, he replies and I put the files back into the spool folder > letting them know to have the sender fix the problem. > > John Tolmachoff MCSE CSSA > Engineer/Consultant > eServices For You > www.eservicesforyou.com > > > > -----Original Message----- > > From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- > > [EMAIL PROTECTED] On Behalf Of paul > > Sent: Monday, August 11, 2003 11:53 AM > > To: [EMAIL PROTECTED] > > Subject: Re: [Declude.JunkMail] Declude Virus Pro and Fprot (DOS) > > > > > In almost all cases, this is a situation where someone thought it would > be > > > cool to tweak a setting that they weren't familiar with (Gee, "Split > > > attachments into multiple E-mails" probably will make my E-mail > faster!", > > > they think). > > > > Heh, in our case it would be "Hey, good way to get your message deleted." > =) > > I've been deleting the Vulnerabilities, and more than 95% have all been > > SPAM, only 1 person I've spoken with to correct this problem ever > > complained, and as Scott mentioned, he thought it was to help speed up > > delivery. I just explained that ANY potential threat to our users is taken > > seriously, and we'll not risk the whole for someone too lazy to fix their > > mail. He fixed his problem. =) > > > > What about the rest on the list? Do you delete vulnerabilities? > > > > Paul > > > > > > --- > > [This E-mail scanned for viruses by Declude Virus] > > > > --- > > [This E-mail was scanned for viruses by Declude Virus > (http://www.declude.com)] > > > > --- > > This E-mail came from the Declude.JunkMail mailing list. To > > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > > type "unsubscribe Declude.JunkMail". The archives can be found > > at http://www.mail-archive.com. > > --- > [This E-mail was scanned for viruses by Declude Virus > (http://www.declude.com)] > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be found > at http://www.mail-archive.com. > > --- > [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be found > at http://www.mail-archive.com.
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
--- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by friend.ly.net.]
--- [This E-mail scanned for viruses by Friend.ly.net.]
--- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
--- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
