I did the same test - only 19,20 and 21 made it past Postini (all malformed and harmless I suspect). True some were trapped as virus and the others as special offer email (trapped none the less). However you have the opportunity to read these on the Postini web site without much chance of harm (ok you have reduced the likelihood a huge amount). Yes a user could push one of the spam trapped through - that's where the next layer of your defenses can be exercised :)
For those that had #12 get through... it is a password protected zip that is not malformed (i.e. the zip itself is not the exploit). I'd say you would have trouble opening it <grin> and so have trouble infecting yourself accidentally. If you can / do open any password protected zip (without the password) your name is Indiana Jones and you are prepared for the risks. Ian -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Joe Wolf Sent: Monday, June 14, 2004 8:16 AM To: [EMAIL PROTECTED] Subject: Re: [IMail Forum] testvirus.org test results I tested this on Postini which claims to have very good anti-virus scanning. The following went thru the Postini virus trap: 2, 4, 5, 6, 7, 8, 12, 16, 17, 23, and 25. Postini did trap all the rest of them in the SPAM trap, but they would be delivered to my inbox if I accepted them. I may have to re-think Postini! -Joe ----- Original Message ----- From: "R. Scott Perry" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Monday, June 14, 2004 6:42 AM Subject: RE: [IMail Forum] testvirus.org test results > > >Imail (assp/declude/fprot): 4, 5, 11, 14, 16, 17, 19, 18 > > > >Not an expert on virus signatures but Scott will probably chime in soon. > > There's something seriously wrong there. The only thing that I can think > of is that ASSP is trying to "fix up" the headers somehow. > > If you can contact me off-list, I can work with you to find out why they > are not all getting caught on your system. They definitely should be. > > -Scott > --- > Declude JunkMail: The advanced anti-spam solution for IMail mailservers > since 2000. > Declude Virus: Ultra reliable virus detection and the leader in mailserver > vulnerability detection. > Find out what you've been missing: Ask for a free 30-day evaluation. > > --- > [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] > > > To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html > List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ > Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ > To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
