X-CEFIB Note: This E-mail was scanned by Declude JunkMail (www.declude.com) for spam. X-CEFIB Note: This E-mail was scanned by Declude Virus & F-PROT for viruses. Precedence: bulk Sender: [EMAIL PROTECTED] Reply-To: [EMAIL PROTECTED]
instead of skipifvirusnamehas in .eml, just use skipifsender [Forged] that way you only need to update virus.cfg when a new forging virus arrives no need to update all the .emls every time ----- Original Message ----- From: "Steinar P. Rasch" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Tuesday, September 23, 2003 10:55 PM Subject: RE: [IMail Forum] Declude Virus software is flawed??? > Hi! > > This seem to be about the Swen virus. > > And it was not included in .eml's as a forging virus. > > Can we just add this to the SKIPIFVIRUSNAMEHAS in the .eml's and > virus.cfg file as a FORGINGVIRUS? > > Steinar > > > > >I just got this "nice" message from a remote mail server about Declude: > > This isn't about Declude -- it's about almost all mailserver AV programs > (I > have a list of dozens of them that do this). In fact, Declude Virus is > (as > far as we know) the only AV program that *doesn't* have the flaw that > they > are complaining about (if you keep Declude up-to-date). > > Less than 1% of viruses forge the return address of E-mail, but many of > the > widespread viruses do. Because of this, you need to either turn off > notifications based on the return address of the E-mail, or make sure > that > everything is up to date. With versions of Declude Virus released after > > early 2002, the default .eml files from our site will prevent the > notifications from getting sent out when a forged virus is detected. > > With the latest beta version of Declude Virus, you don't even need to > keep > the .eml files updated (we have a server set up that keeps track of > which > viruses are forging viruses). It also allows us to keep track of what > IPs > are sending viruses (so we can report to the correct sender), as well > what > viruses are most common. We just added a page at > http://apps.declude.com/tools/virinfo.ch that lists the most recent > viruses. > > -Scott > --- > Declude JunkMail: The advanced anti-spam solution for IMail mailservers. > Declude Virus: Catches known viruses and is the leader in mailserver > vulnerability detection. > Find out what you've been missing: Ask about our free 30-day evaluation. > > --- > [This E-mail was scanned for viruses by Declude Virus > (http://www.declude.com)] > > > To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html > List Archive: > http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ > Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ > > > > To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html > List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ > Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ > To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
