[Declude.Virus] Usage 1.2
For those that are using the Usage 1.2 tool have any of you seen this error? C:\IMail\Decludeusage.cmd Mail destination: [EMAIL PROTECTED] Invalid number. Numeric constants are either decimal (17), hexadecimal (0x11), or octal (021). 9 was unexpected at this time. what does this mean? It was working fine up till a couple days ago. Thanks, Greg attachment: winmail.dat
[Declude.Virus] Fw: Undeliverable Mail
Hi, I have a problem which I want to solve by having Declude *not* send a message when the recipient is [EMAIL PROTECTED] Is there a way to do this? If not, is there another way to get rid of these messages? Met vriendelijke groet, Bonno Bloksma - Original Message - From: Postmaster [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Tuesday, September 09, 2003 8:54 AM Subject: Undeliverable Mail Invalid final delivery userid: [EMAIL PROTECTED] Original message follows. Date: Tue, 9 Sep 2003 08:54:07 +0200 Message-Id: [EMAIL PROTECTED] Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii From: Postmaster [EMAIL PROTECTED] Reply-To: [EMAIL PROTECTED] To: [EMAIL PROTECTED] Subject: WARNING: YOU MAY HAVE A VIRUS X-Mailer: IMail v8.01 X-Declude-Sender: [EMAIL PROTECTED] [127.0.0.1] X-Note: This E-mail was scanned by Declude JunkMail (www.declude.com) for spam. De Declude antivirus software op tio.nl heeft een virus gevonden in een e-mail die u had gestuurd aan [EMAIL PROTECTED] Het betreft het [Outlook 'MIME Header' Vulnerability] virus in de Log.zip.scr bijlage. Het onderwerp van uw bericht was Undelivered Mail Returned to Sender -Log. Het bericht is in quarantaine geplaatst en wordt niet afgeleverd. --- The Declude Virus software on tio.nl has reported that you sent an E-mail to [EMAIL PROTECTED], containing the [Outlook 'MIME Header' Vulnerability] virus in the Log.zip.scr attachment. The subject of the E-mail was Undelivered Mail Returned to Sender -Log. The E-mail containing the virus has been quarantined to prevent further damage. Headers Follow: Received: from mail.tio.nl [213.197.11.46] by tio.nl (SMTPD32-8.01) id A90C73E013A; Tue, 09 Sep 2003 08:54:04 +0200 From: Mail Delivery System[EMAIL PROTECTED] To: [EMAIL PROTECTED] Subject: Undelivered Mail Returned to Sender -Log Date: Tue,09 Sep 2003 08:52:52 PM X-Mailer: Microsoft Outlook Express 5.50.4133.2400 MIME-Version: 1.0 Content-Type: multipart/mixed; boundary=mouxulg Message-Id: [EMAIL PROTECTED] --- [This E-mail scanned for viruses by Declude Virus using f-prot and Sophos] --- [This E-mail scanned for viruses by Declude Virus using f-prot and Sophos] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
[Declude.Virus] Fw: Undeliverable Mail
Hi, Which keyword do I need to add to the *.eml file to see which attachment (filename) was stopped? I have not been able to find an appropriate keyword but I might have missed it. Met vriendelijke groet, Bonno Bloksma - Original Message - From: Postmaster [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Tuesday, September 09, 2003 1:36 PM Subject: Undeliverable Mail Delivery Failed: [EMAIL PROTECTED] The mail server for tio.nl does not accept E-mail with attachments that contain the pif extension. Original message follows: Received: from mail.tio.nl [213.197.11.46] by tio.nl (SMTPD32-8.01) id AB5752F0052; Tue, 09 Sep 2003 13:36:55 +0200 From: branda_hilhorst[EMAIL PROTECTED] To: [EMAIL PROTECTED] Subject: Log Date: Tue,09 Sep 2003 13:35:42 PM X-Mailer: Microsoft Outlook Express 5.50.4133.2400 MIME-Version: 1.0 Content-Type: multipart/mixed; boundary=owuokss Message-Id: [EMAIL PROTECTED] --- [This E-mail scanned for viruses by Declude Virus using f-prot and Sophos] --- [This E-mail scanned for viruses by Declude Virus using f-prot and Sophos] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
Re: [Declude.Virus] Fw: Undeliverable Mail
I have a problem which I want to solve by having Declude *not* send a message when the recipient is [EMAIL PROTECTED] Is there a way to do this? If not, is there another way to get rid of these messages? You can add a line SKIPIFRECIP [EMAIL PROTECTED] (with just one space or tab on the line, and not adding any extra blank lines) to the appropriate \IMail\Declude\*.eml files. This will work with v1.75 and higher. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you have been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
Re: [Declude.Virus] Fw: Undeliverable Mail
Which keyword do I need to add to the *.eml file to see which attachment (filename) was stopped? I have not been able to find an appropriate keyword but I might have missed it. You can use %VIRUSFILE% for that. Note that %VIRUSFILE% only works when a virus is detected (not for banned file extensions). There is no equivalent for banned files. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you have been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
Re: [Declude.Virus] Latest Version
http://www.declude.com/virus/manual.htm Sincerely, William J. Baumbach II [EMAIL PROTECTED] 9975 Pennsylvania Ave. Manassas, Va. 20110-2028 Ph: 703-367-7900 ext:1708 Fax: 703-691-0946 - - Original Message - From: Timothy C. Bohen [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Monday, September 08, 2003 4:33 PM Subject: [Declude.Virus] Latest Version Sorry if this is real obvious but I haven't upgrade my declude in a long time and I can't remember where to get the latest version. Can someone point me in the right direction? Thanks Timothy C. Bohen CMSInter.Net LLC / Crystal MicroSystems LLC === web : www.cmsinter.net email: [EMAIL PROTECTED] phone: 989.235.5100 x222 fax : 989.235.5151 --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com. [ scanned for spam to: [EMAIL PROTECTED] incoming http://www.DcMetroNet.com on 09/08/2003 at 16:42:58-0500et. ] [ scanned for viruses to: [EMAIL PROTECTED] incoming http://www.DcMetroNet.com on 09/08/2003 at 16:43:01-0500et. ] [ scanned for spam to: [EMAIL PROTECTED] outgoing http://www.DcMetroNet.com on 09/09/2003 at 10:51:59-0500et. ] This email message is for the sole use of the intended recipient(s) and may contain confidential and privileged information. Any unauthorized review, use, disclosure or distribution of this email is prohibited. If you are not the intended recipient, please contact the sender and destroy all paper and electronic copies of this message. [ scanned for viruses to: [EMAIL PROTECTED] outgoing http://www.DcMetroNet.com on 09/09/2003 at 10:52:03-0500et. ] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
Re: [Declude.Virus] Fw: Undeliverable Mail
For banned file extensions this will give the name of the extension but not the full file name %BANEXT% Sincerely, William J. Baumbach II [EMAIL PROTECTED] 9975 Pennsylvania Ave. Manassas, Va. 20110-2028 Ph: 703-367-7900 ext:1708 Fax: 703-691-0946 - - Original Message - From: R. Scott Perry [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Tuesday, September 09, 2003 10:20 AM Subject: Re: [Declude.Virus] Fw: Undeliverable Mail Which keyword do I need to add to the *.eml file to see which attachment (filename) was stopped? I have not been able to find an appropriate keyword but I might have missed it. You can use %VIRUSFILE% for that. Note that %VIRUSFILE% only works when a virus is detected (not for banned file extensions). There is no equivalent for banned files. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you have been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com. [ scanned for spam to: [EMAIL PROTECTED] incoming http://www.DcMetroNet.com on 09/09/2003 at 10:26:46-0500et. ] [ scanned for viruses to: [EMAIL PROTECTED] incoming http://www.DcMetroNet.com on 09/09/2003 at 10:26:48-0500et. ] [ scanned for spam to: [EMAIL PROTECTED] outgoing http://www.DcMetroNet.com on 09/09/2003 at 10:55:35-0500et. ] This email message is for the sole use of the intended recipient(s) and may contain confidential and privileged information. Any unauthorized review, use, disclosure or distribution of this email is prohibited. If you are not the intended recipient, please contact the sender and destroy all paper and electronic copies of this message. [ scanned for viruses to: [EMAIL PROTECTED] outgoing http://www.DcMetroNet.com on 09/09/2003 at 10:55:39-0500et. ] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] Fw: Undeliverable Mail
Which keyword do I need to add to the *.eml file to see which attachment (filename) was stopped? I have not been able to find an appropriate keyword but I might have missed it. You can use %VIRUSFILE% for that. Note that %VIRUSFILE% only works when a virus is detected (not for banned file extensions). There is no equivalent for banned files. But %BANEXT% does show the extension caught. Scott, would it be possible to add a new variable, %ATTACHMENTS% that would show the file name of all attachments? John Tolmachoff MCSE CSSA Engineer/Consultant eServices For You www.eservicesforyou.com --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
[Declude.Virus] Do mail forwards get scanned?
Exactly what happens with addresses set to be forwarded? Incoming mail to [EMAIL PROTECTED] (which has no virus scanning) is forwarded to [EMAIL PROTECTED] (which does have virus scanning). Does the message get scanned? Erik --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
Re: [Declude.Virus] Do mail forwards get scanned?
Exactly what happens with addresses set to be forwarded? Incoming mail to [EMAIL PROTECTED] (which has no virus scanning) is forwarded to [EMAIL PROTECTED] (which does have virus scanning). Does the message get scanned? Declude Virus scans all E-mail by default, so it all depends on what your customized settings may be. If E-mail is sent to an address that does not have scanning enabled, and it forwards it to another address, it will not be scanned by Declude Virus (no matter where the account is located -- IMail will not call Declude again). -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you have been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
[Declude.Virus] Upgrade
I'm running declude junkmail and virus, currently running 1.55 I'm about to install 1.75 any thing I should be concerned with? Thanks Timothy C. Bohen CMSInter.Net LLC / Crystal MicroSystems LLC === web : www.cmsinter.net email: [EMAIL PROTECTED] phone: 989.235.5100 x222 fax : 989.235.5151 --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
[Declude.Virus] ISP's .. responsible..
Title: Message http://www.eweek.com/article2/0,4149,1258034,00.asp Hi; Not that I wish to start a debate on this.. but just wondering. Imagine if the responsibility is dumped on the ISP's .. I think Scott would be a happy man! Regards, Kami
