Hi!

This seem to be about the Swen virus.

And it was not included in .eml's as a forging virus.

Can we just add this to the SKIPIFVIRUSNAMEHAS in the .eml's and
virus.cfg file as a FORGINGVIRUS?

Steinar



>I just got this "nice" message from a remote mail server about Declude:

This isn't about Declude -- it's about almost all mailserver AV programs
(I 
have a list of dozens of them that do this).  In fact, Declude Virus is
(as 
far as we know) the only AV program that *doesn't* have the flaw that
they 
are complaining about (if you keep Declude up-to-date).

Less than 1% of viruses forge the return address of E-mail, but many of
the 
widespread viruses do.  Because of this, you need to either turn off 
notifications based on the return address of the E-mail, or make sure
that 
everything is up to date.  With versions of Declude Virus released after

early 2002, the default .eml files from our site will prevent the 
notifications from getting sent out when a forged virus is detected.

With the latest beta version of Declude Virus, you don't even need to
keep 
the .eml files updated (we have a server set up that keeps track of
which 
viruses are forging viruses).  It also allows us to keep track of what
IPs 
are sending viruses (so we can report to the correct sender), as well
what 
viruses are most common.  We just added a page at 
http://apps.declude.com/tools/virinfo.ch that lists the most recent
viruses.

                                                    -Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers.
Declude Virus: Catches known viruses and is the leader in mailserver 
vulnerability detection.
Find out what you've been missing: Ask about our free 30-day evaluation.

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]


To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/



To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/

Reply via email to