But if the AV scanner is catching it (FPROT updates every 2 hours) , how much of an increase in system resources will be utilized in actually performing scanning....this is the question I was was weighing...
Sincerely, Randy Armbrecht Global Web SolutionsR, Inc. 804-346-5300 ext. 1 877-800-GLOBAL (4562) ext. 1 http://globalweb.net -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John Tolmachoff (Lists) Sent: Tuesday, August 19, 2003 2:44 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.Virus] Turing off .pif notifications? (sobig.F) Big Hugh risk. If it is being caught by banned extension, the AV scanner is not catching it. John Tolmachoff MCSE CSSA Engineer/Consultant eServices For You www.eservicesforyou.com > -----Original Message----- > From: [EMAIL PROTECTED] [mailto:Declude.Virus- > [EMAIL PROTECTED] On Behalf Of GlobalWeb.net Webmaster > Sent: Tuesday, August 19, 2003 10:37 AM > To: [EMAIL PROTECTED] > Subject: RE: [Declude.Virus] Turing off .pif notifications? (sobig.F) > > We're getting poiunded todat also with pif's and scr's from SoBig... > > How much of a risk would it be to temporarily rem this setting in the > BanExt area, allow Declude to filter and quarantine the message and > then use the SKIP option to not send out a message to sender ??? > > > Sincerely, > > Randy Armbrecht > Global Web SolutionsR, Inc. > 804-346-5300 ext. 1 > 877-800-GLOBAL (4562) ext. 1 > http://globalweb.net > > > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry > Sent: Tuesday, August 19, 2003 1:32 PM > To: [EMAIL PROTECTED] > Subject: Re: [Declude.Virus] Turing off .pif notifications? (sobig.F) > > > > >I have BANEXT active, and as a courtesy I have a notification through > >Delcude going out in case someone is legitimately trying to send an > >.exe file. Is there anyway to turn this off for the .pif extension? > >The SOBIG.F Virus is sending this to all my users with fake e-mail > >addresses and then the notice is going out to either the innocent or > >to > > >bad addresses - this is generating more useless e-mail traffic. I'd > >like to keep the notify on the .exe (for now) but is there a way to > >turn it off for just the .pif? > > No, there is not a way to turn them off for just one specific > extension. > > -Scott > --- > Declude JunkMail: The advanced anti-spam solution for IMail > mailservers. Declude Virus: Catches known viruses and is the leader in > mailserver vulnerability detection. Find out what you have been > missing: Ask for a free 30-day evaluation. > > --- > [This E-mail was scanned for viruses by Declude Virus > (http://www.declude.com)] > > --- > This E-mail came from the Declude.Virus mailing list. To unsubscribe, > just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.Virus". The archives can be found > at http://www.mail-archive.com. > --- > [This msg Virus Scanned by GlobalWeb.net] > > > --- > [This msg Virus Scanned by GlobalWeb.net] > > --- > [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] > > --- > This E-mail came from the Declude.Virus mailing list. To unsubscribe, > just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.Virus". The archives can be found > at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com. --- [This msg Virus Scanned by GlobalWeb.net] --- [This msg Virus Scanned by GlobalWeb.net] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com.
