Reply to: R. Scott Perry
Re: [Declude.Virus] PIF Not Blocked With Whitelist on Wednesday 5:45:50 PM
Was sent with web messaging and was infected with Netsky.
Doesn't show up on the virus log.
Here is header:
Received: from rleeheath.com [24.154.165.94] by rleeheath.com with ESMTP
(SMTPD32-8.12) id ABF0187B02F8; Wed, 14 Jul 2004 15:47:44 -0500
From: [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Subject: Re: Your software
Date: Wed, 14 Jul 2004 16:36:58 -0400
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----=_NextPart_000_0010_00006C6D.000049DD"
X-Priority: 3
X-MSMail-Priority: Normal
Message-Id: <[EMAIL PROTECTED]>
X-RBL-Warning: TESTS-FAILED:(weight 0) Whitelisted
X-RBL-Warning: RDNS-ROUTE: 24.154.165.94 - acs-24-154-165-94.zoominternet.net - UNITED
STATES->destination
X-RBL-Warning: REAL-MAILFROM: [EMAIL PROTECTED]
X-RBL-Warning: REAL-MAILTO: (1) [EMAIL PROTECTED]
X-ActivatorMail: Spam-Weight: 0 - D9bef187b02f87748.SMD arrival: 15:47:51
--
Roger Heath
[EMAIL PROTECTED]
www.rleeheath.com
----- Copy of Original Message(s): -----
>>I just had a user on my system send me a PIF file even though
>>I have
>>
>>BANEXT PIF
>>
>>in my config? He authenticated on whitelist and the file went
>>right through. This has got to be a bug, right?
RSP> What does your Declude Virus log file say? How was the message sent (real
RSP> E-mail, or via web messaging)? Note that Declude JunkMail code isn't
RSP> called if Declude Virus blocks an E-mail, so a Declude JunkMail whitelist
RSP> won't whitelist the E-mail.
RSP> -Scott
RSP> ---
RSP> Declude JunkMail: The advanced anti-spam solution for IMail mailservers
RSP> since 2000.
RSP> Declude Virus: Ultra reliable virus detection and the leader in mailserver
RSP> vulnerability detection.
RSP> Find out what you've been missing: Ask for a free 30-day evaluation.
RSP> ---
RSP> [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
RSP> ---
RSP> This E-mail came from the Declude.Virus mailing list. To
RSP> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
RSP> type "unsubscribe Declude.Virus". The archives can be found
RSP> at http://www.mail-archive.com.
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus". The archives can be found
at http://www.mail-archive.com.
