Lentin forges the from address. If you would post on the Declude Virus forum and search the archives, you will see that most of us are using SKIPIFVIRUSNAMEHAS Lentin in the config file.
John Tolmachoff MCSE, CSSA IT Manager, Network Engineer RelianceSoft, Inc. Fullerton, CA 92835 www.reliancesoft.com -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Dale McDiarmid Sent: Monday, November 25, 2002 10:02 AM To: [EMAIL PROTECTED] Subject: [IMail Forum] MAILER-DAEMON sending virus? Hello... I'm getting a warning message a few times each week from Declude as it's catching an outgoing virus. I'm not certain what it means, exactly. I've included the text of the message below. What is MAILER-DAEMON, and how is it sending a virus? The "to": "MyUser" (name changed to protect the innocent) is constant in each of these messages, as is the virus (Lentin). Getting a few a of these outgoing virus warnings a week. My mailserv and the MyUser client are clean of viruses (F-Prot with current def's), though it's possible MyUser is using a home computer I'm not aware of. We use Eudora, the messages indicate OE. Any suggestions? Thanks, D. Declude message follows: (IIRC, the format is the default used by Declude for outging viruses). Declude Virus v1.53 caught the : W32/Lentin.F@mm virus in Me Descript..txt.scr from [EMAIL PROTECTED] to: [EMAIL PROTECTED] Date: 11/21/2002 22:53:16 Subject: Undelivered Mail Returned to Sender -Me Descript. Spool File: Dc64a284.SMD Remote IP: 68.3.52.46 Headers: Received: from mail.bookmans.com [68.3.52.46] by mailhost.bookmans.com (SMTPD32-6.04) id A64A7F980284; Thu, 21 Nov 2002 22:53:14 -0700 From: Mail Delivery System<[EMAIL PROTECTED]> To: [EMAIL PROTECTED] Subject: Undelivered Mail Returned to Sender -Me Descript. Date: Wed,20 Nov 2002 22:46:04 PM X-Mailer: Microsoft Outlook Express 5.50.4133.2400 MIME-Version: 1.0 Content-Type: multipart/mixed; boundary=htciomc Message-Id: <[EMAIL PROTECTED]> To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
