Good Day
Yes, sending virus alerts to the intended receiver OR the likely forged
sender is almost pointless today and in fact, as Randy stated some time ago:
From: "Randy Brukardt" <[EMAIL PROTECTED]>
Subject: RE: AVP - reminder
Date: Thu, 5 Feb 2004
Yes; there is no longer any point in replying to virii; virtually all of
them fake From addresses. I just saw the following which drives home the
point:
http://www.f-prot.com/news/gen_news/open_letter_30jan2004.html
Randy.
And for AVP version 1.01 Marco's method works fine for me:
From: Marco Antonio Peña Corona <[EMAIL PROTECTED]>
Subject: Re: AVP - reminder
Date: Mon, 9 Feb 2004
By those of you that are still lucky enough to have your AVP filter working
I have a tip for avoiding the email virus warning: Add the letter "a" in
the "Virii that Forge Return Addresses" list. Every single scan detecting a
virus will contain at least one letter "a"
So what I have done is this:
1st, in the AVP.INI the parameter is:
ViriiThatFakeReplyAddress=a
2nd, in order for me to continue to monitor possible infected users on our
WAN I use Trash Finder to filter on the AVP parameter address to the TR
"virus" directory and then schedule a batch file to move the messages for
review to my abuse mail folder.
"[EMAIL PROTECTED]"
-----
batch commands:
move \spool\trash\virus\*.* \mail\abuse
del *.rcp
This has been working like a charm for the last few months of high virus
activity.
Regards
Don
At 08:48 AM 5/7/04 -0400, you wrote:
can you disable the option to send warnings back to the sender of infected
messages on that version, or any version?
`
(o o)
oOO--(_)--OOo
Don R. Hill
Northern Lights College
Computer Systems Support Analyst
Regional Administration
11401 - 8 Street
Dawson Creek, BC, Canada V1G 4G2
[EMAIL PROTECTED] http://www.nlc.bc.ca
Ph. (250) 784-7558 Fax: (250) 782-5233
This is the discussion list for the IMS Free email server software.
To unsubscribe send mailto:[EMAIL PROTECTED]
Delivered by Rockliffe MailSite
http://www.rockliffe.com/mailsite
Rock Solid Software (tm)
