I concur.
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Douglas Cohn
Sent: Saturday, April 16, 2005 9:06 AM
To: Declude.Virus@declude.com
Subject: RE: [Declude.Virus] Skipifforging not working on Mytob
The only other difference is that I'm using SmarterMail.
That cause your Smarter. The difference between SmarterMail
and Imail is just unreal. It is like the difference between
breathing and having a plastic bag over your head. Imail
always sucked but I lived with it because I owned a copy from
a previous business venture and Declude worked great. I
cannot imagine what anyone else's excuse is G but I am
sure they exist and are valid as well.
But Smartermail is so much faster, smoother nicer need I say
more. It also does not choke on every little thing that
pounds the server.
Dump Imail and be glad you did.
Just my 1 cent.
DC
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Shayne Embry
Sent: Friday, April 15, 2005 12:53 PM
To: Declude.Virus@declude.com
Subject: RE: [Declude.Virus] Skipifforging not working on Mytob
I have also been experiencing this, for over a week. I'm only
using F-Prot, but have added the appropriate lines to eml and
virus.cfg files as John has. The only other difference is
that I'm using SmarterMail.
Shayne
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of John Carter
Sent: Friday, April 15, 2005 10:48 AM
To: Declude.Virus@declude.com
Subject: [Declude.Virus] Skipifforging not working on Mytob
Shortly after adding ClamAV to the Imail Server a few days ago, my
system started sending virus notices on Mytob (and so far,
only Mytob)
even though I have SKIPIFFORGING in the sender.eml, recip.eml and
postmaster.eml, plus I have Mytob in the list of forging viruses in
the virus.cfg. In the virus log lines below, scanner 1 is
F-Prot and
scanner 2 is ClamAV.
The timing to the addition to ClamAV may be only a coincidence.
Any ideas about what's happening?
Thanks,
John
Notice lines:
==
Declude Virus 2.0.5 caught a incoming virus
Subject: hello
From: [Forged]
To: [EMAIL PROTECTED]
Msg ID: [EMAIL PROTECTED]
Queue#: D74590703010e25a9.SMD
Remote IP: 63.197.109.187
Virus Name/File: W32/[EMAIL PROTECTED] data.zip
postmaster.eml
==
SKIPIFFORGING
From: [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Subject: E-mail virus notice
Declude Virus %VERSION% caught a %INOROUT% virus
Subject: %SUBJECT%
From: %MAILFROM%
To: %ALLRECIPS%
Msg ID: %MSGID%
Queue#: %QUEUENAME%
Remote IP: %REMOTEIP%
Virus Name/File: %VIRUSNAME% %VIRUSFILE%
Headers:
%HEADERS%
Virus log lines:
04/15/2005 02:59:36 Q74590703010e25a9 Banning .ZIP file with exe
extension. 04/15/2005 02:59:36 Q74590703010e25a9 Scanner
1: Virus=W32/[EMAIL PROTECTED] Attachment=data.zip [36] I
04/15/2005 02:59:37 Q74590703010e25a9 Scanner 2: Virus=
Worm.Mytob.T-2 Attachment=data.zip [36] I 04/15/2005 02:59:37
Q74590703010e25a9 File(s) are INFECTED [W32/[EMAIL PROTECTED]: 1]
04/15/2005 02:59:37 Q74590703010e25a9 Deleting file with virus
04/15/2005 02:59:37 Q74590703010e25a9 Deleting E-mail with virus!
04/15/2005 02:59:37 Q74590703010e25a9 Scanned:
CONTAINS A VIRUS [MIME: 2 58859] 04/15/2005 02:59:37
Q74590703010e25a9 From: [Forged] To: [EMAIL PROTECTED] [incoming
from 63.197.109.187] 04/15/2005 02:59:37
Q74590703010e25a9 Subject: hello
---
This E-mail came from the Declude.Virus mailing list. To
unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.
---
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just
send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.
---
[This E-mail scanned for viruses by Declude Virus]
---
[This E-mail scanned for viruses by Declude Virus]
---
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.
---
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.
