Correct, you can not strip the attachment, the configured action is taken on the whole message. So, if you have Declude Virus configured to automatically delete (not recommended) then the whole message is deleted.
John Tolmachoff Engineer/Consultant/Owner eServices For You > -----Original Message----- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] > On Behalf Of Dave Marchette > Sent: Friday, September 24, 2004 11:36 AM > To: [EMAIL PROTECTED] > Subject: RE: [Declude.Virus] F-Prot/GDI+ FYI > > Odd. My experience with the BANEXT command is that it caused the entire > email be deleted, not just the banned extension. > > > > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Mark Smith > Sent: Friday, September 24, 2004 11:07 AM > To: [EMAIL PROTECTED] > Subject: RE: [Declude.Virus] F-Prot/GDI+ FYI > > Dave, > BANEXT JPG > > > Scott, > Here's the information about how to track the malformed header using > SNORT. > http://isc.sans.org/diary.php?date=2004-09-23 > > Also some utilities on scanning your PC. > > > > -----Original Message----- > > From: [EMAIL PROTECTED] > > [mailto:[EMAIL PROTECTED] On Behalf Of Dave Marchette > > Sent: Friday, September 24, 2004 12:13 PM > > To: [EMAIL PROTECTED] > > Subject: RE: [Declude.Virus] F-Prot/GDI+ FYI > > > > That being the case, can you outline for us the simplest way > > to strip JPEGs out of a message yet still send the rest of > > the message through? > > > > > > > > -----Original Message----- > > From: [EMAIL PROTECTED] > > [mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry > > Sent: Friday, September 24, 2004 8:52 AM > > To: [EMAIL PROTECTED] > > Subject: RE: [Declude.Virus] F-Prot/GDI+ FYI > > > > > > >Scott, is there anything recommend that we can do strictly > > from Declude > > >Virus to protect against this until the virus scanners can > > pick it up? > > > > Without blocking all .JPG files, nothing. The problem is > > that there is a lack of information on how to detect such .JPG's. > > > > -Scott > > --- > > Declude JunkMail: The advanced anti-spam solution for IMail > > mailservers since 2000. > > Declude Virus: Ultra reliable virus detection and the leader > > in mailserver vulnerability detection. > > Find out what you've been missing: Ask for a free 30-day evaluation. > > > > --- > > [This E-mail was scanned for viruses by Declude Virus > > (http://www.declude.com)] > > > > --- > > This E-mail came from the Declude.Virus mailing list. To > > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > > type "unsubscribe Declude.Virus". The archives can be found > > at http://www.mail-archive.com. > > --- > > [This E-mail was scanned for viruses by Declude Virus > > (http://www.declude.com)] > > > > --- > > This E-mail came from the Declude.Virus mailing list. To > > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > > type "unsubscribe Declude.Virus". The archives can be found > > at http://www.mail-archive.com. > > > > > --- > [This E-mail was scanned for viruses by Declude Virus > (http://www.declude.com)] > > --- > This E-mail came from the Declude.Virus mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.Virus". The archives can be found > at http://www.mail-archive.com. > --- > [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] > > --- > This E-mail came from the Declude.Virus mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.Virus". The archives can be found > at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com.
