In order to do what is shown below, check out
http://bbs.lynndust.com/imail/server.asp
This is an excellent resource on how to setup Imail to do SPAM filtering.
The IMFilter that is mentioned in the article works VERY well and is well
worth the $20.
If you are feeling a little spunky, check out http://IMGate.MEIway.com
Len Conrad has done an excellent job with a SPAM gateway for Imail. It takes
a little work and some external knowledge of *NIX to get it running, but it
will offload that job from your mail server.
have fun
rusty
----- Original Message -----
From: Jonathan <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Friday, May 19, 2000 10:01 AM
Subject: RE: [IMail Forum] Another virus.
put this line in your rules.ima file
B ~ file na me = " . * \. vb s": NUL
Take *ALL* the spaces out.
Jonathan
At 03:48 PM 5/19/2000 +0200, you wrote:
>OK. I'm a new subscriber. So how can I block all vbs files on my system
6.02
>?
>Thanks in adv.
>Didier
>
> > -----Message d'origine-----
> > De : [EMAIL PROTECTED]
> > [mailto:[EMAIL PROTECTED]]De la part de Virtual Web
> > Servers
> > Envoy� : vendredi 19 mai 2000 15:34
> > � : [EMAIL PROTECTED]
> > Objet : Re: [IMail Forum] Another virus.
> >
> >
> > This is why EVERYBODY should be blocking *.vbs
> >
> > If anyone reading this list is NOT blocking these files because they are
> > unsure of exactly how to do it, post the question. The subject
> > was beaten to
> > death a couple of weeks ago, with every other post being about
> > this problem,
> > so everyone should have a pretty good idea. But if you missed it,
> > or didn't
> > figure it out, ASK somebody. With the number of Imail installs
> > out there, we
> > can make a dent in the amount of this stuff that is moving around if
> > everybody does there jobs instead of crossing their fingers. Your
> > users are
> > not as smart as you are, help them.
> >
> > rusty
> > ----- Original Message -----
> > From: Jonathan <[EMAIL PROTECTED]>
> > To: <[EMAIL PROTECTED]>
> > Sent: Friday, May 19, 2000 9:10 AM
> > Subject: Re: [IMail Forum] Another virus.
> >
> >
> > Yep, we saw it rolling around 10a ... made me pretty glad to be blocking
> > *.vbs :)
> >
> > Jonathan
> >
> > At 08:45 AM 5/19/2000 -0400, you wrote:
> > >Sorry if this is off topic, but if it saves anyone it is worth it.
> > >
> > >There is a new strain of the love virus called VBS.NewLove.A. This one
is
> > >vicious. Here is the write up from Norton.
> > >
> > >Mark
> > >
> > >Technical description:
> > >
> > >This polymorphic Loveletter variant will overwrite ALL files that are
not
> > >currently in use regardless of extension. It arrives as an email
message
> > >with a subject of "FW: FILENAME.EXT" and an attachment named
> > >"FILENAME.EXT.VBS" (where FILENAME.EXT is derived from the
> > infected user's
> > >recently opened documents list.) The body of the email is empty. If no
> > >documents have been used recently, this name is randomly
> > generated. If the
> > >message has been generated by a system running Windows NT or
> > Windows 2000,
> > >then the filename will be omitted and the subject of the message will
be
> > >"FW: .EXT" and the attachment name will be ".EXT.VBS" (again, the file
> > >extension will vary depending on the recently opened documents list of
> > >infected machines.)
> > >
> > >Removal:
> > >
> > >The contents of all files will be deleted, leaving the affected
> > files with
> > a
> > >byte length of zero. The worm will also append the extension
> > '.vbs' to each
> > >of these files. For example, the file calc.exe will become
calc.exe.vbs.
> > >Since this worm overwrites all files regardless of extension, proper
> > removal
> > >can only be achieved by restoring the affected files from known clean
> > >backups.
> > >
> > >
> > >
> > >Please visit http://www.ipswitch.com/support/mailing-lists.html
> > >to be removed from this list.
> >
> >
> >
> > ________________________________
> > You want it? We've got it!
> > http://home.paperwork.com
> >
> > Please visit http://www.ipswitch.com/support/mailing-lists.html
> > to be removed from this list.
> >
> >
> > Please visit http://www.ipswitch.com/support/mailing-lists.html
> > to be removed from this list.
> >
>
>Please visit http://www.ipswitch.com/support/mailing-lists.html
>to be removed from this list.
________________________________
You want it? We've got it!
http://home.paperwork.com
Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.
Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.
