Hi,
I need to know more of this snowhite virus can anyone help??
A cure would be great but know where its coming from will help. I am so new
to this though, so please keep it as simple as you can. Thanks. Where can I
get this Declude AV?? is there anything else I might need??
Patrick.
-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]
Sent: 07 January 2001 8:11:am
Subject: [IMail_Forum DIGEST]
----------------------------------------------------------------------
Date: Sat, 06 Jan 2001 09:13:07 +0100
From: Len Conrad <[EMAIL PROTECTED]>
Subject: RE: [IMail Forum] Sending messages to AOL
Reply-To: [EMAIL PROTECTED]
>I too just installed IMail and ran into the same problem. And I also just
>made the entries for MX, A and PTR in the DNS about 24 hrs ago. These
>changes seem to have filtered through already, but is it possible that AOL
>is just plain slow, and that is causing the emails to be kicked back to me?
It depends on your TTL for the domain's DNS records. If the records
didn't exist but were asked for, then there is a "negative caching"
where a DNS will cache for the TTL period the failed requests, ie
cache the negative answers, just it caches the positive answers.
When the emails are bounced to you, show us the log lines and error
number/reason that AOL is giving.
AOL does not / cannot reject when reverse lookup fails because it
would reject 50% of Internet's mail servers. AOL does reject if the
"Mail From: sender@senderdomain" domain is not in DNS as A and/or MX
records.
Len
http://BIND8NT.MEIway.com : Binary for ISC BIND 8.2.3 T9B for NT4 & W2K
http://IMGate.MEIway.com : Build free, hi-perf, anti-spam mail gateways
----------------------------------------------------------------------
Date: Sat, 06 Jan 2001 09:17:30 +0100
From: Len Conrad <[EMAIL PROTECTED]>
Subject: Re: [IMail Forum] OT Question
Reply-To: [EMAIL PROTECTED]
>Need - Radius server for NT/2000
Emerald's RadiusNT has had a good reputation as a radius server. I do
not know whether it runs now on W2K. search www.google.com
Len
http://BIND8NT.MEIway.com : Binary for ISC BIND 8.2.3 T9B for NT4 & W2K
http://IMGate.MEIway.com : Build free, hi-perf, anti-spam mail gateways
----------------------------------------------------------------------
Date: Sat, 06 Jan 2001 09:20:37 +0100
From: Len Conrad <[EMAIL PROTECTED]>
Subject: Re: [IMail Forum] Best AV Setup
Reply-To: [EMAIL PROTECTED]
>I think best Antivirus solutions would be:
>To have two imgate's
>Scan incoming mail's with Len's imgate AV then forward to imail
>Scan Outgoing mail's with Scott's Declude then forward to 2. imgate
>for delivery.
>
>What do you guys think?
You don't need both, since IMGateAV scans, your choice, both in and
out. I assume
Scott's does the same.
Len
http://BIND8NT.MEIway.com : Binary for ISC BIND 8.2.3 T9B for NT4 & W2K
http://IMGate.MEIway.com : Build free, hi-perf, anti-spam mail gateways
----------------------------------------------------------------------
From: Mike Nice <[EMAIL PROTECTED]>
Date: Sat, 06 Jan 01 08:23:59 -0500
Subject: Re: [IMail Forum] Email Spoofs And Spam.
Reply-To: [EMAIL PROTECTED]
In <009301c07752$8d3af9d0$5601a8c0@KEVINCPC>, on 01/01/00 at 12:00 AM,
"Kevin Cross" <[EMAIL PROTECTED]> said:
>Lately our users have been receiving a lot of spam through our mail
>server that seem to be untraceable. There is no "From:" entry in the
>message headers and in many cases no "To:" entries as well. Does anyone
>know how I can use the message filters to stop these messages from being
>received? Or any other methods I can use to filter this spam and email
>spoofs out?
To identify the sender, you need to match IP address and time to
customer login.
This is the signature of one of the plugins of the "Snow White"
W32/hybris virus. The message comes from someone on your system. If you
look at the Q*.SMD file on the queue, you will probably find garbage
characters (not even ASCII) for the FROM and TO addresses. If one of
those garbage characters happens to be an '@', IMail accepts the message,
where it sits in the queue.
I had to manually delete these messages from the queue until I
installed Declude AV, which neatly redirects those messages to the
quarantine directory.
--
-----------------------------------------------------------
Mike Nice <[EMAIL PROTECTED]>
-----------------------------------------------------------
----------------------------------------------------------------------
From: "Terry L Fritts" <[EMAIL PROTECTED]>
Date: Sat, 6 Jan 2001 08:10:12 -0600
Subject: [IMail Forum] Declude Install
Reply-To: [EMAIL PROTECTED]
I installed Scott Perry's ([EMAIL PROTECTED]) http://www.declude.com
Declude this morning along with Frisk's http://www.complex.is f-prot command
line virus scanner.
I spent less than 30 minutes most of which was trying to figure out how
f-prot worked and how to set the command line arguments in the deculde virus
cfg file. Probably to actually install Declude itself is under 5 minutes.
Declude is a very nice product.
Terry Fritts
----------------------------------------------------------------------
Date: Sat, 06 Jan 2001 09:37:49 -0500
From: Hawk <[EMAIL PROTECTED]>
Subject: [IMail Forum] Imail Configuration
Reply-To: [EMAIL PROTECTED]
Hi all,
I want to setup Imail to service 2 domains w/o setting up a virtual. Can
simple enter the domains in the host aliases? What is the limit for that
list?
IE: countryschool.org countryschool.com
----------------------------------------------------------------------
From: "Will Hall" <[EMAIL PROTECTED]>
Date: Sat, 6 Jan 2001 10:35:43 -0500
Subject: Re: [IMail Forum] OT Question
Reply-To: [EMAIL PROTECTED]
Thanks Len
Will Hall
C. W. Networks
MCP / MCP+i / MCSE
i-Net+ / Network + / CNA
219.583.6860
----- Original Message -----
From: "Len Conrad" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Saturday, January 06, 2001 3:17 AM
Subject: Re: [IMail Forum] OT Question
>
> >Need - Radius server for NT/2000
>
> Emerald's RadiusNT has had a good reputation as a radius server. I do
> not know whether it runs now on W2K. search www.google.com
>
> Len
>
>
>
> http://BIND8NT.MEIway.com : Binary for ISC BIND 8.2.3 T9B for NT4 & W2K
> http://IMGate.MEIway.com : Build free, hi-perf, anti-spam mail gateways
>
>
> Please visit http://www.ipswitch.com/support/mailing-lists.html
> to be removed from this list.
>
> An Archive of this list is available at:
> http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
>
----------------------------------------------------------------------
Date: Sat, 06 Jan 2001 17:24:49 +0100
From: Len Conrad <[EMAIL PROTECTED]>
Subject: Re: [IMail Forum] OT Question
Reply-To: [EMAIL PROTECTED]
>Thanks Len
another one: http://www.tccsoftware.com/software.asp
Len
http://BIND8NT.MEIway.com : Binary for ISC BIND 8.2.3 T9B for NT4 & W2K
http://IMGate.MEIway.com : Build free, hi-perf, anti-spam mail gateways
----------------------------------------------------------------------
Date: Sat, 6 Jan 2001 10:45:35 -0700
From: "Chuck Schick" <[EMAIL PROTECTED]>
Subject: Re: [IMail Forum] OT Question
Reply-To: [EMAIL PROTECTED]
It sounds like a two part process. We use Vircom's radius product and
combine it with Boardtown's platypus billing software within a customer
information module. The radius and the billing software use the same SQL
database. The customer can access his account from the WWW. see his
account status, usage, change password, etc.
It has worked well for us but it does cost money although we though the
price was reasonable.
C. Schick
---------- Original Message ----------------------------------
From: "Will Hall" <[EMAIL PROTECTED]>
Reply-To: [EMAIL PROTECTED]
Date: Fri, 5 Jan 2001 22:35:40 -0500
>OK Guys heres on for off the topic.
>
>Need - Radius server for NT/2000
>
>Would Like -
>
>Ability to admin from www, ability for users to change own pass from www,
>users be able to check monthly usage time from www.
>
>Any suggestions???
>
>
>Will Hall
>C. W. Networks
>MCP / MCP+i / MCSE
>i-Net+ / Network + / CNA
>219.583.6860
>
>
>Please visit http://www.ipswitch.com/support/mailing-lists.html
>to be removed from this list.
>
>An Archive of this list is available at:
>http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
>
----------------------------------------------------------------------
From: "Randy Sherwyn" <[EMAIL PROTECTED]>
Date: Sat, 6 Jan 2001 15:22:33 -0500
Subject: RE: [IMail Forum] OT Question
Reply-To: [EMAIL PROTECTED]
Absolutely, Vircom PRRS Radius is the cream of the crop. We use it the same
way with Rodopi for billing.
Randy
TNT Online
Ft. Myers, FL
>
> It sounds like a two part process. We use Vircom's radius
> product and combine it with Boardtown's platypus billing software
> within a customer information module. The radius and the billing
> software use the same SQL database. The customer can access his
> account from the WWW. see his account status, usage, change
> password, etc.
>
> It has worked well for us but it does cost money although we
> though the price was reasonable.
>
> C. Schick
>
>
> ---------- Original Message ----------------------------------
> From: "Will Hall" <[EMAIL PROTECTED]>
> Reply-To: [EMAIL PROTECTED]
> Date: Fri, 5 Jan 2001 22:35:40 -0500
>
> >OK Guys heres on for off the topic.
> >
> >Need - Radius server for NT/2000
> >
> >Would Like -
> >
> >Ability to admin from www, ability for users to change own pass from www,
> >users be able to check monthly usage time from www.
> >
> >Any suggestions???
----------------------------------------------------------------------
From: "Wayne Smith" <[EMAIL PROTECTED]>
Date: Sat, 6 Jan 2001 16:34:53 -0500
Subject: Re: [IMail Forum] Best AV Setup
Reply-To: [EMAIL PROTECTED]
Len
I'd agree that you don't need both, but if/when Declude has the option to
not scan e-mail based on the IP address passing the mail to it, you could
have the IMGateAV box scan incoming and leave outbound mail to the Imail box
without having to reconfigure the users or change outbound mail
processing... assuming you have the memory, Disk IO, and CPU time on the
Imail box for it.
Would make for good load balancing and not having to change too much at one
time. We currently don't have outbound mail shipped through any of our
postfix boxes. The Imail server does fine about getting the mail out. If
we were doing mailing list delivery, that would probably change.
*********************************
Wayne Smith, CNE/MCSE/CCNP/CCDP
Computer Resources (http://www.cros.net)
----- Original Message -----
From: "Len Conrad" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Saturday, January 06, 2001 3:20 AM
Subject: Re: [IMail Forum] Best AV Setup
<<< snip >>>>
> You don't need both, since IMGateAV scans, your choice, both in and
> out. I assume
> Scott's does the same.
>
> Len
>
>
>
> http://BIND8NT.MEIway.com : Binary for ISC BIND 8.2.3 T9B for NT4 & W2K
> http://IMGate.MEIway.com : Build free, hi-perf, anti-spam mail gateways
----------------------------------------------------------------------
From: "Jim Jones, Jr." <[EMAIL PROTECTED]>
Date: Sat, 6 Jan 2001 19:31:31 -0600
Subject: [IMail Forum] Best AV Setup ? what about brightmail ?
Reply-To: [EMAIL PROTECTED]
We are looking at the Brightmail solution... it scans for spam and virus,
however, I don't know if it scans outgoing mail... It costs $5.00 per
mailbox per year and that incudes the sun server that it runs on.
Has anyone had experience with this solution ? good or bad? I would like
some stories before we make any further decisions...
Thanks,
Jim
Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.
An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
