I do know this was discussed previously on this list as an issue, but I can't remember exactly what the solution was. I do know that it was mentioned that in most cases this is not an issue, since most viruses now days seem to autosend without the user intentionally attaching them. What versions of declude and imail are you running? You may want to try a newer version of declude to see if that changes anything.
Jim Matuska Jr. Computer Tech II CCNA Nez Perce Tribe Information Systems [EMAIL PROTECTED] ----- Original Message ----- From: "ISPhuset Nordic AS" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Tuesday, August 12, 2003 1:16 PM Subject: RE: [Declude.Virus] problems when testing a new server > running the exact same version > > but what i found here is that if i log onto my webmail on the old server i can send and eicar.com file to my account on another > domain and it is not being stopped either from the virus scanner or from the banext in my config file > > but do i send it from my mailclient it works ok > > -----Original Message----- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jim Matuska > Sent: 12. august 2003 22:02 > To: [EMAIL PROTECTED] > Subject: Re: [Declude.Virus] problems when testing a new server > > > Are you running the same versions of Imail and declude on each server, I > seem to remember something a while back about needing a later version of > Imail or Declude to catch webmail based virus attachments. > > Jim Matuska Jr. > Computer Tech II > CCNA > Nez Perce Tribe > Information Systems > [EMAIL PROTECTED] > ----- Original Message ----- > From: "ISPhuset Nordic AS" <[EMAIL PROTECTED]> > To: <[EMAIL PROTECTED]> > Sent: Tuesday, August 12, 2003 12:41 PM > Subject: [Declude.Virus] problems when testing a new server > > > > Have sett up the server in the exact same with one exception > > > > on the old server i use f-prot312c > > > > on the new server i user f-prot314a_m > > > > when i run a test with eicar.com on the server localy in webmail > > it slips through when i have i only the on demand scanner installed > > > > copy of config > > > > # > > # Declude Virus configuration file > > # > > > > CODE 6F4B90A4 > > > > # The "####" in the LOGFILE option gets replaced with the month/date > > > > LOGFILE E:\virus\vir####.log > > LOGLEVEL MID > > CONSOLE OFF > > > > > > # SCANFILE is the location of the command-line virus scanner. Note that it > > # must include the full path. VIRUSCODE is the code that scanner returns > if > > # it finds a virus. > > > > SCANFILE C:\f-prot\fpcmd.exe /TYPE /SILENT /NOMEM /NOFLOPPY > /ARCHIVE /NOBOOT /DUMB /REPORT=report.txt > > > > VIRUSCODE 3 > > VIRUSCODE 6 > > #VIRUSCODE 8 > > REPORT Infection > > > > PRESCAN ON > > > > > > # VIRDIR is the directory to move E-mails with viruses; by default, > > # it is set to 'virus' (\IMail\spool\virus). > > > > VIRDIR E:\virus > > > > # The MAXATONCE option limits the number of AV processes. For example, > > # MAXATONCE 1 will only allow 1 AV process to run at once (IE for > licensing > > # purposes). A value of 0 (or commenting it out) allows unlimited > processes > > # to run at the same time. > > #MAXATONCE 1 > > > > ## The following options allow you to limit scanning to only incoming or > outgoing > > # E-mail, with v1.13 and higher. If they are commented out ("#" in front > of them), > > # Declude will scan all E-mail. > > > > #INCOMING ON > > #OUTGOING ON > > > > BANEXT COM > > BANEXT PIF > > BANEXT EXE > > BANEXT SCR > > > > BANNAME message.zip > > > > > > > > when i turn on the real time protector i cant attatch the eicar.com file > deny it just at is should > > > > Any good ideas here > > > > --- > > [This E-mail was scanned for viruses by Declude Virus > (http://www.declude.com)] > > > > --- > > This E-mail came from the Declude.Virus mailing list. To > > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > > type "unsubscribe Declude.Virus". The archives can be found > > at http://www.mail-archive.com. > > > > > --- > [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] > > --- > This E-mail came from the Declude.Virus mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.Virus". The archives can be found > at http://www.mail-archive.com. > > --- > [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] > > --- > This E-mail came from the Declude.Virus mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.Virus". The archives can be found > at http://www.mail-archive.com. > > --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com.
