RE: [Declude.Virus] Spoofed Addresses

[Panda Consulting S.A. Luis Alberto Arango]

Use the SKIPIFVIRUSNAMEHAS command in your sender.eml, that way a notification will not be sent to sender if an specific virus is caught   For example.. here is what we have in sender.eml at the beginning of the file   SKIPIFVIRUSNAMEHAS Vulnerability SKIPIFVIRUSNAMEHAS Magistr SKIPIFVIRUSNAMEHAS Hybris SKIPIFVIRUSNAMEHAS Klez SKIPIFVIRUSNAMEHAS Bugbear SKIPIFVIRUSNAMEHAS Bridex SKIPIFVIRUSNAMEHAS Sobig SKIPIFSENDER @boss.com     Make sure there is only one space between the command and the name of the virus or vulnerability.   I am also sending you a table with the available commands. They are very useful, you may want to take a look at them.   The following table is from the manual “Each command needs to be on a line by itself. You need to make sure that these options (and any To:, From:, or Subject: lines) appear before the first blank line in the E-mail template file.” Command Restriction Usage ONLYSENDIFLOCALSENDER Will only send the notification if the sender of the virus is a local user. ONLYSENDIFLOCALSENDER ONLYSENDIFREMOTESENDER Will only send the notification if the sender of the virus is a remote user. ONLYSENDIFREMOTESENDER ONLYSENDIFSENDER Will only send the notification if the sender of the virus is one you specify. ONLYSENDIFSENDER [EMAIL PROTECTED] ONLYSENDIFSENDER @example.com ONLYSENDIFLOCALRECIPIENT Will only send the notification if the recipient of the virus is a local user. ONLYSENDIFLOCALRECIPIENT ONLYSENDIFREMOTERECEIPIENT Will only send the notification if the recipient of the virus is a remote user. ONLYSENDIFREMOTERECIPIENT SKIPIFSENDER Will not send the notification if the sender of the virus is one that you specify. SKIPIFSENDER [EMAIL PROTECTED] SKIPIFSENDER @example.com SKIPIFRECIP Will not send the notification if the recipient of the virus is one that you specify. SKIPIFRECIP [EMAIL PROTECTED] SKIPIFRECIP @example.com SKIPIFVIRUSNAMEHAS Will not send the notification if the virus name has the text that you specify. SKIPIFVIRUSNAMEHAS Klez SKIPIFVIRUSNAMEDOESNOTHAVE Will not send the notification if the virus name does not have the text that you specify. SKIPIFVIRUSNAMEDOESNOTHAVE Vulnerability     I hope it helps.. regards   Luis   -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Chad Killion Sent: Thursday, October 02, 2003 4:45 PM To: [EMAIL PROTECTED] Subject: [Declude.Virus] Spoofed Addresses   I am sure this has been discussed many times in the past, but I have been out of the loop, so forgive me for asking again.  How do you notify your customers who send viruses without notifying the ones with spoofed return addresses?  When we had the SoBig virus going around, we had to literally shut off our notifications because people were blacklisting us because we were sending them Virus messages even though they didn't send the virus. Thanks in advance.   Chad     --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]   --- This E-mail came from the Declude.Virus mailing list.  To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".    The archives can be found at http://www.mail-archive.com. ______ [Email scanned for viruses by Panda Consulting -www.pandacons.com-] [Email escaneado contra virus por Panda Consulting -www.pandacons.com-]