thanks, I'll play around with that this weekend.

"Don R. Hill" wrote:

> Good Day
>
> Yes, sending virus alerts to the intended receiver OR the likely forged
> sender is almost pointless today and in fact, as Randy stated some time ago:
> >From: "Randy Brukardt" <[EMAIL PROTECTED]>
> >Subject: RE: AVP - reminder
> >Date: Thu, 5 Feb 2004
> >Yes; there is no longer any point in replying to virii; virtually all of
> >them fake From addresses. I just saw the following which drives home the
> >point:
> >
> >http://www.f-prot.com/news/gen_news/open_letter_30jan2004.html
> >
> >              Randy.
>
> And for AVP version 1.01 Marco's method works fine for me:
> >From: Marco Antonio Peña Corona <[EMAIL PROTECTED]>
> >Subject: Re: AVP - reminder
> >Date: Mon, 9 Feb 2004
> >By those of you that are still lucky enough to have your AVP filter working
> >I have a tip for avoiding the email virus warning:  Add the letter "a" in
> >the "Virii that Forge Return Addresses" list. Every single scan detecting a
> >virus will contain at least one letter "a"
>
> So what I have done is this:
> 1st, in the AVP.INI the parameter is:
> ViriiThatFakeReplyAddress=a
> 2nd, in order for me to continue to monitor possible infected users on our
> WAN I use Trash Finder to filter on the AVP parameter address to the TR
> "virus" directory and then schedule a batch file to move the messages for
> review to my abuse mail folder.
> "[EMAIL PROTECTED]"
> -----
> batch commands:
> move \spool\trash\virus\*.* \mail\abuse
> del *.rcp
>
> This has been working like a charm for the last few months of high virus
> activity.
>
> Regards
> Don
>
> At 08:48 AM 5/7/04 -0400, you wrote:
> >can you disable the option to send warnings back to the sender of infected
> >messages on that version, or any version?
>
>         `
>       (o o)
>   oOO--(_)--OOo
>
>   Don R. Hill
>   Northern Lights College
>   Computer Systems Support Analyst
>   Regional Administration
>   11401 - 8 Street
>   Dawson Creek, BC, Canada   V1G 4G2
>   [EMAIL PROTECTED]   http://www.nlc.bc.ca
>   Ph. (250) 784-7558 Fax: (250) 782-5233
>
> This is the discussion list for the IMS Free email server software.
>   To unsubscribe send mailto:[EMAIL PROTECTED]
>
>             Delivered by Rockliffe MailSite
>            http://www.rockliffe.com/mailsite
>                 Rock Solid Software (tm)

This is the discussion list for the IMS Free email server software.
  To unsubscribe send mailto:[EMAIL PROTECTED]

            Delivered by Rockliffe MailSite
           http://www.rockliffe.com/mailsite
                Rock Solid Software (tm)

Reply via email to