>>I have a moderated list. The owner is [EMAIL PROTECTED] Only the >>moderator/owner can post. How does IMail perform this check? Does it just >>look at the From field and see if it matches? The reason I am asking is >>that it seems a message with a virus was posted to the list. The
>It checks the "From:" header (and possibly other headers or the SMTP >envelope?). We've seen this happen, too, where the spammer has a header >"From: Admin" and the E-mail gets to the list (presumably "admin" is >treated the same as "administrator" and "root", and automatically has >clearance to post to the list).
Shouldn't the IMail AV scanner have caught the virus when it was firat sent to the list?
Was the E-mail that made it to the list a virus? If not, it shouldn't have been caught. :) If so, that's a very important piece of information -- in which case your mailserver virus scanner (IMail AV, presumably) should have caught it. But you first need to verify that there was indeed a virus (most likely, if the list is of any decent size, you'll have users reporting the virus if there was one).
-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000.
Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection.
Find out what you've been missing: Ask for a free 30-day evaluation.
--- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
