In the online manual for DV dated 26 Feb 2004 it does not mention anything about FORGINVIRUS in the CFG file? Maybe that's why it didn't work for me?
That's a separate and rarely used option, that just replaces the (forged) sender's address with "[forged]" if you send recipient notifications (which are OK to send with forging viruses, as they are not bogus, like the sender notifications).
However, we do suggest that our customers run the latest version, which automatically detects forging viruses, so they don't have to manually update anything.
How does it do this?
When Declude Virus detects a virus, it sends the virus name and the IP that the virus was sent from to a server here. The server checks against a list of forging viruses, and responds with an answer letting Declude Virus know whether or not the virus is forging.
And what settings do I need to change to implement this?
None, if you are using v1.78 or later (unless you have any custom notifications that you do not want sent out when forging viruses are detected, but very few people do).
The online manual says that "SKIPIFSENDER" Will not send the notification if the sender of the virus is one that you specify." - indicating you'd have to specify all the addresses? Or does entering [Forged] make it do it manually?
Don't worry about that -- you're making it more complicated than it needs to be. If you have an up-to-date Service Agreement, you can download v1.78, and Declude Virus will "just do it".
-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000.
Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection.
Find out what you've been missing: Ask for a free 30-day evaluation.
--- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
