[I'm responding to several E-mails here, to cut down on the volume of this
thread]
>I catch about 100 Klez every day with Declude
>
>Some of the notification messages Declude sends out bounce back, but I
>just delete those
The Klez virus forges the return address of the E-mail (often going to
valid accounts that didn't send the virus, often going to invalid
accounts). But, disabling the "sender" notifications for Klez will fix that.
> Could you post a "how-to" on getting a KLEZ virus notification not to go
to the forged address?
Just add "SKIPIFVIRUSNAMEHAS Klez" to the sender.eml and
otherpostmaster.eml files (you can just add it as the first line in the
file). Note that you can only have one space/tab between
"SKIPIFVIRUSNAMEHAS" and "Klez".
> And will it only work with the latest version?
Only the latest release has the SKIPIFVIRUSNAMEHAS in it (since Klez was
the first virus to do such a good job forging return addresses).
-Scott
---
Declude: Anti-virus, Anti-spam and Anti-hijacking solutions for
IMail. http://www.declude.com
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.
An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Please visit the Knowledge Base for answers to frequently asked
questions: http://www.ipswitch.com/support/IMail/
