Unfortunately, a number of serious vulnerabilities have recently been discover in Microsoft Outlook, that will cause legitimate mail to occasionally get caught. These vulnerabilities in Outlook are turning virus detection into an art much more like spam detection, requiring lots of tweaking to get it right.Our Declude AV system appears to have caught a bad email from Declude to us? This is strange, but perhaps I'm not reading it right. Anyone else experience this or have an opinion?
What mailserver AV companies (are you ready Ipswitch?) will probably have to do eventually is have two levels of virus protection: "Standard" protection that will catch 100% of known viruses and 0% of legitimate mail, and "Outlook-only" protection that will catch about 98% of known viruses and about 1% of legitimate mail.
In this case, Microsoft has a vulnerability where AV software *should* block any E-mail that has the word "begin" at the beginning of one line, and "end" at the beginning of a following line (which happens occasionally in legitimate E-mail). Fortunately, we have found a way around this, and the next release of Declude Virus will be able to detect the vulnerability in virtually all cases, while allowing virtually all legitimate mail through.
-Scott
---
Declude: Anti-virus, Anti-spam and Anti-hijacking solutions for IMail. http://www.declude.com
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
