>Does anyone know about the following and is Declude geared up for it?
>
>"...Note of caution: Some of the newer viruses are including a complete copy
>of SMTP (the mail server protocol) in them. They thus can bypass your
>outgoing mail server (and virus detection system) and spread....."
>
>*(This is from my network management in the US and they DON'T use Declude)
Ah, that sounds like something coming from someone in network management,
who is an expert in network management (not network security) and got a
notice from someone in network security (who is an expert in network
security, but not network management). Between the two of them, they knew
there was a potential problem, but couldn't figure out what it was.
There are some newer viruses that have their own SMTP functionality in
them. However, they do this so that they can bypass limitations of
Outlook. The SMTP functionality in them is *identical* to what a standard
mail client has (except that it may be more suited to sending a
virus). The SMTP functionality in the virus might allow it to send
outgoing viruses that bypass your mail server. However, if it sends any
copies to your local users, it will have to contact your mail server.
So the "problem" is that if one of your users gets a virus (which is much
less likely, by running Declude Virus), people outside your company may get
copies (unless their mail server scans for viruses).
So where there should normally be 2 mail servers scanning for viruses (the
sending SMTP server and the receiving SMTP server), there may now only be 1
(the receiving SMTP server). So this alert is only appropriate for
companies that have no virus scanning on their mail server, and rely on the
sending mail servers to have virus scanning (which often won't be the case).
-Scott
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus". You can E-mail
[EMAIL PROTECTED] for assistance. You can visit our web
site at http://www.declude.com .
