Even more fundamental, wouldn't Imail's built-in, Inbound mail filtering capabilities achieve the task of redirecting infected email carriers to a location other than the end-user's inbox?
I say this because we do not yet license the Declude software but are interested in evaluating it in our environment. In the interim, we've had to do the best with what we've got! We introduced an inbound rule that redirects any message (at least so it seems) with "your password!" in the subject heading to an alternate, administrative mailbox (web messaging) for review. I am currently looking at about inbound 50 messages that seem to be propogating the worm. Had we not filtered, these messages would have gone right to our end-users. However, had the existence of the new worm not been mentioned on the list, I would not have created the rule. Thanks for posting recent, high-distribution virus alerts to the Imail list! Sean Malone University of Dallas ---------- Original Message ---------------------------------- From: "Sharyn Schmidt" <[EMAIL PROTECTED]> Reply-To: [EMAIL PROTECTED] Date: Mon, 15 Jul 2002 13:42:46 -0400 >Wouldn't blocking .exe files accomplish the same thing? > >Sharyn > > >>Also noted is that Declude Virus is catching this as follows: >> >>Declude Virus v1.55 caught the [Outlook 'MIME Header' Vulnerability] >>virus in decrypt-password.exe from ... > > > >We are the worldwide producer and marketer of the award winning Cruzan >Single Barrel Rum, judged "Best in the World" at the annual >San Francisco Wine and Spirits Championships, and the >artisan tequilas of Porfidio 100% Agave Tequilas, judged "Best >Tequila" four years running by the Wine Enthusiast magazine. For >more information, please click (go to) <html><a >href="http://www.cruzanrums.com";>http://</a><a >href="http://www.cruzanrums";>www.cruzanrums.com</a></html> > >Please visit http://www.ipswitch.com/support/mailing-lists.html >to be removed from this list. > >An Archive of this list is available at: >http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ > >Please visit the Knowledge Base for answers to frequently asked >questions: http://www.ipswitch.com/support/IMail/ > Please visit http://www.ipswitch.com/support/mailing-lists.html to be removed from this list. An Archive of this list is available at: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Please visit the Knowledge Base for answers to frequently asked questions: http://www.ipswitch.com/support/IMail/
