Odd. My experience with the BANEXT command is that it caused the entire email be deleted, not just the banned extension.
-----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mark Smith Sent: Friday, September 24, 2004 11:07 AM To: [EMAIL PROTECTED] Subject: RE: [Declude.Virus] F-Prot/GDI+ FYI Dave, BANEXT JPG Scott, Here's the information about how to track the malformed header using SNORT. http://isc.sans.org/diary.php?date=2004-09-23 Also some utilities on scanning your PC. > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Dave Marchette > Sent: Friday, September 24, 2004 12:13 PM > To: [EMAIL PROTECTED] > Subject: RE: [Declude.Virus] F-Prot/GDI+ FYI > > That being the case, can you outline for us the simplest way > to strip JPEGs out of a message yet still send the rest of > the message through? > > > > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry > Sent: Friday, September 24, 2004 8:52 AM > To: [EMAIL PROTECTED] > Subject: RE: [Declude.Virus] F-Prot/GDI+ FYI > > > >Scott, is there anything recommend that we can do strictly > from Declude > >Virus to protect against this until the virus scanners can > pick it up? > > Without blocking all .JPG files, nothing. The problem is > that there is a lack of information on how to detect such .JPG's. > > -Scott > --- > Declude JunkMail: The advanced anti-spam solution for IMail > mailservers since 2000. > Declude Virus: Ultra reliable virus detection and the leader > in mailserver vulnerability detection. > Find out what you've been missing: Ask for a free 30-day evaluation. > > --- > [This E-mail was scanned for viruses by Declude Virus > (http://www.declude.com)] > > --- > This E-mail came from the Declude.Virus mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.Virus". The archives can be found > at http://www.mail-archive.com. > --- > [This E-mail was scanned for viruses by Declude Virus > (http://www.declude.com)] > > --- > This E-mail came from the Declude.Virus mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.Virus". The archives can be found > at http://www.mail-archive.com. > --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com.
