Sorry, forgot to make an all inclusive list: To my knowledge, there is no BounceNotify.eml.
JunkMail uses the following eml files ONLY: SpamAttach.eml Confirm uses the following eml file ONLY: Confirm.eml When EVA finds a vulnerability (list in the EVA manual further down from the allow section) it uses the following file ONLY: Vulnerability.eml When EVA finds a banned attachment and the associated email is not found to be virus laden or contain a vulnerability, EVA will use the following file ONLY: BanNotify.eml ANY OTHER eml file contained in the \declude directory will be used by EVA when a virus is found according to parameters within each file. So, if you have 50 eml files aside from the above specifically mentioned 4, EVA will try to use all 50 when it finds a virus. The reason for this along with the original 4 other eml files normally found (postmaster.eml, otherpostmaster.eml, sender.eml and recipient.eml) was so that a appropriately worded notice be set to each respective party as desired. However, that also allows for plenty of customization. Example, I have a client that the manager wants a copy of each notice sent. So I have created 2 specific eml files for that client, one for if the infected email is incoming and one for if the infected email is outgoing. John T eServices For You "Seek, and ye shall find!" > -----Original Message----- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Gary > Steiner > Sent: Thursday, August 10, 2006 9:05 PM > To: declude.virus@declude.com > Subject: RE: [Declude.Virus] New feature needed > > But what defines a "vulnerability"? Are you referring to the list of vulnerabilities > associated with the ALLOWVULNERABILITY statement in the EVA manual? I'm > confused by the various .eml files Declude provides and how it decides to use them, > whether EVA or Junkmail. None of the .eml files that come with Declude have the > name of a vulnerability. > > Here is a list of the E-mail template files that came with the Declude 4.x installation > and how I guess that they are used (since there doesn't seem to be some centralized > description/list of what these files are and how they are used): > > spamattach.eml - Used by Junkmail when ATTACH action is implemented. > > postmaster.eml - Used by EVA to warn the postmaster of the local machine that a > virus was detected. > > BOUNCEnotify.eml - Used by EVA to warn the local sender that his (outgoing) E-mail > attachment contained a banned extension. > > BANnotify.eml - Used by EVA to warn the sender that his (incoming) E-mail > attachment contained a banned extension. > > otherpostmaster.eml - Used by EVA to warn the postmaster of a host that a virus > came from his server (typically not used due to virus forging). > > sender.eml - Used by EVA to warn the sender that an E-mail sent by him was > detected as a virus (typically not used due to virus forging). > > recip.eml - Used by EVA to warn the recipient that Declude detected a virus send to > him. > > confirm.eml - Used by Declude Confirm > (http://www.declude.com/Articles.asp?ID=127). Is this a discontinued product? If > not, does it work with SmarterMail? > > > So it seems that most of the files are used by EVA, one by Junkmail and one by > Confirm. Does that mean that Junkmail and Confirm only use their one specific .eml > file and ignore all the others? If I create a randomly named .eml file, will it only be > used by EVA? > > > > -------- Original Message -------- > > From: "John T \(Lists\)" <[EMAIL PROTECTED]> > > Sent: Thursday, August 10, 2006 9:37 PM > > To: declude.virus@declude.com > > Subject: RE: [Declude.Virus] New feature needed > > > > When a vulnerability is detected, it looks for vulnerability.eml only. When > > a virus is detected, it uses any and all .eml files except for > > vulnerability.eml. > > > > So yes, you could do that. > > > > John T > > eServices For You > > > > "Seek, and ye shall find!" > > > > > -----Original Message----- > > > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Gary > > > Steiner > > > Sent: Thursday, August 10, 2006 4:43 PM > > > To: declude.virus@declude.com > > > Subject: RE: [Declude.Virus] New feature needed > > > > > > I was wondering if there might be a work-around for this. Could a > > combination of > > > multiple .eml files utilizing SKIPIFRECIP work? > > > > > > I guess the first question is what .eml files does Declude look for when > > it detects a > > > virus? Does EVA specifically look for a file named "recip.eml"? Or does > > it look at all > > > the .eml files in the main Declude directory? > > > > > > Could you have two files, one called recip-en.eml (English) and one called > > recip- > > > es.eml (Spanish), and then list in those files using SKIPIFRECIP all the > > domains that > > > want the other language? > > > > > > Gary > > > > > > > > > -------- Original Message -------- > > > > From: "Goran Jovanovic" <[EMAIL PROTECTED]> > > > > Sent: Tuesday, June 20, 2006 3:57 PM > > > > To: declude.virus@declude.com > > > > Subject: RE: [Declude.Virus] New feature needed > > > > > > > > Gary, > > > > > > > > I have not even thought of something like that (since all my customers > > > > are English speaking) but you are absolutely right. > > > > > > > > So David will we be seeing this new feature next week? :) > > > > > > > > Goran Jovanovic > > > > Omega Network Solutions > > > > > > > > > > > > > > > > > -----Original Message----- > > > > > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of > > > > Gary > > > > > Steiner > > > > > Sent: Tuesday, June 20, 2006 3:24 PM > > > > > To: declude.virus@declude.com > > > > > Subject: re: [Declude.Virus] New feature needed > > > > > > > > > > > > > > > I asked about the possibility of per domain replies several months > > > > ago. I > > > > > would hope that it has already been placed on the wish list. > > > > > > > > > > It is especially useful when you have users speaking different > > > > languages > > > > > and you want to have language specific messages linked to each domain. > > > > > > > > > > Gary > > > > > > > > > > > > > > > -------- Original Message -------- > > > > > > From: "Goran Jovanovic" <[EMAIL PROTECTED]> > > > > > > Sent: Tuesday, June 20, 2006 2:30 PM > > > > > > To: declude.virus@declude.com > > > > > > Subject: [Declude.Virus] New feature needed > > > > > > > > > > > > Hi, > > > > > > > > > > > > I would like to suggest a new feature to be added to the virus > > > > > > notification capabilities. > > > > > > > > > > > > Right now to notify a recipient that I stopped a virus I have a > > > > > > recip.eml file in my main delude directory. There is another > > > > > > recip-vulnerability.eml file that is used if the "virus" is a > > > > > > vulnerability. These two files are all or nothing files. Meaning > > > > that > > > > > > all recipients for all the domains that I process are in the same > > > > file. > > > > > > > > > > > > I need to be able to specify a per domain recip.eml file. This way I > > > > can > > > > > > tailor the notifications to each domain as appropriate. These files > > > > > > should be in the domain subdirectory along with the > > > > $default$.junkfile > > > > > > etc. > > > > > > > > > > > > I am faced with the challenge right now for a single domain to send > > > > all > > > > > > virus notification to one person only or to stop all notifications > > > > to > > > > > > that domain. To the best of my knowledge I cannot redirect all the > > > > > > notifications to the one person for that domain and to the original > > > > > > recipients for all the other domains. > > > > > > > > > > > > Another feature that should be added to the *.eml files is the > > > > ability > > > > > > to do a BCC to a monitoring address. This is a good way to monitor > > > > what > > > > > > is happening with banned files, viruses or whatever notification > > > > > > processes we have setup. > > > > > > > > > > > > So can you please add this to the "to do" list > > > > > > > > > > > > Thank you > > > > > > > > > > > > Goran Jovanovic > > > > > > Omega Network Solutions > > > > > > > > > > > > > > > > > > --- > > > > > > --- > This E-mail came from the Declude.Virus mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.Virus". The archives can be found > at http://www.mail-archive.com. --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com.
