Remember this link is included in the recipients email.
http://serverwithvirus.com:port/declude.asp?msgid=%QUEUENAME%
We use Port 81. We also remove almost all access to IIS and use IIS
lockdown to tighten all the way down.
The way that we do this is we include the link to the infected file in the
alert email. You want the Virus here it is. We explain how dangerous it is
to request such a file but if the client determines that the message is
urgent they have the opportunity to click once and be done.
No going to other pages and pasting anything. Obviously there is the danger
involved but these are grown people and the danger is to themselves.
The script works as I posted. If you know Javascript you can modify it.
Being used for well over a year by the original author and I have used it
for months with never an issue.
The obvious issue is allowing people to access infected files. That is your
call whether they paste into another page and you keep track of their name
or they simply click a link and get the virus sent to them. The problems can
occur on their end in both cases.
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Goran Jovanovic
Sent: Friday, May 28, 2004 1:06 PM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.Virus] Notification for forwarded messages
Doug
How do you deal with IIS and IMail web servers both running on the same box
and both wanting port 80?
I have broken up iissocketpooling in the past but it requires 2 IP addresses
to work. Is that what you have done or are you running one on a non standard
port?
Thanx
-Original Message-
From: Douglas Cohn [EMAIL PROTECTED]
Date: Fri, 28 May 2004 12:28:22
To:[EMAIL PROTECTED]
Subject: RE: [Declude.Virus] Notification for forwarded messages
We do this as well using Vbscript only. It does exactly what you do.
Anytime a virus is quarantined an email with a link to the file is sent to
the recepient with a warning of the dangers involved in retrieving the
files. We then delete everything over 5 days old to avoid getting too many
files in the virus dir.
We also require IIS to be running. It was written by an ISP that uses it on
his shared IMAIL server. He deletes them in 2 days.
=
You add this to the recip.eml
=
If you would like a copy of the infected email please follow the link below
AT YOUR OWN RISK!!!
http://serverwithvirus.com:port/declude.asp?msgid=%QUEUENAME%
REMEMBER IT IS AN INFECTED EMAIL. The email will be deleted in 5 days.
The declude.asp file
[EMAIL PROTECTED]
%
var virusdir=c:\\imail\\spool\\virus\\;
var spooldir=c:\\imail\\spool\\;
var file=+Request.QueryString(msgid);
file=file.substr(1);
fso = new ActiveXObject (Scripting.FileSystemObject);
if (fso.FileExists(virusdir+D+file))
{
fso.MoveFile(virusdir+D+file, spooldir+D+file);
fso.MoveFile(virusdir+Q+file, spooldir+Q+file);
Response.Write(Please check your e-mail in a few minutes for the virus
infected message you requested.); } %
Very simple as well.
Doug
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Rick Davidson
Sent: Friday, May 28, 2004 11:01 AM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.Virus] Notification for forwarded messages
I have written a simple app using ASP and PERL that will move the
quarantined file from the virus directory back to the spool for delivery. It
requires IIS to run on the same box as Imail, I run gateway servers so it is
a bit easier for me.
I include the spool name and a link to the gateway server that held the file
in the BanNotify message, the user copies the file name and pastes it to
text box on the ASP page, clicking submit sends it to the PERL script which
moves the file back to the spool.
I then intercept all notifications for banned files that I dont want them
retreiving such as mpegs and mp3s
Works great
I dont mind sharing the code if anyone wants it
Rick Davidson
National Systems Manager
North American Title Group
-
- Original Message -
From: Hermann Strassner [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Friday, May 28, 2004 6:39 AM
Subject: [Declude.Virus] Notification for forwarded messages
Hello!
We block ZIPs and some executable extensions and want to leave it this way.
Because some folks need to send them, we have to check the quarantined files
(for viruses) and forward the mails without viruses manually. Is there a way
to inform the user that his mail is now forwarded?
Alternatively, is it possible for the user to answer to the automatic
generated mail and forward the mail by himself? Is it possible somehow?
I think of it as follows: User sends email with ZIP, gets a notification,
answers to the notification with YES or something like that, Declude sees it
and forwards this email. I think this is enough to make sure the user sends
the email intentionally.
Hermann
---
[This E-mail was
