[Declude.Virus] Scanning on forwarded addresses
We run Declude Virus Standard with F-Prot and I am unsure whether a forwarded message is scanned. If an infected message is sent to a domain which is NOT set up for virus scanning, but is then forwarded to a domain which IS in the Virus_Domains list, will it then be quarantined? Thanks, Erik Erik Hjelholt, Managing Director Alberni-dot-Net, a div. of Tandem Security Inc. 4716 Roger St., Port Alberni, BC V9Y 3Z2 Phone: 250-720-8110 - Fax: 250-723-0901 --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] %date%
If I may chime in here. Yes, the international standard is indeed -MM-DD and if separated by hyphens as shown, there can be absolutely no confusion. We have used it for years, as it is also the only one which can sort properly in plain text. However, even though the Canadian government mandated it as the standard many years ago, their own forms still do not. Go figure. But, why can Declude not simply use the setting in Windows? Then everyone can use their own for their specific locality. Erik Erik Hjelholt, Managing Director Alberni-dot-Net, a div. of Tandem Security Inc. 4716 Roger St., Port Alberni, BC V9Y 3Z2 Phone: 250-720-8110 - Fax: 250-723-0901 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of R. Scott Perry Sent: Thursday, August 12, 2004 04:12 To: [EMAIL PROTECTED] Subject: Re: [Declude.Virus] %date% is there a possibility that you create a secong date because we in europe don't use the date like you do, we use it like DDMM, this could cause misunderstandings with our clients. so could you create for virus and junkmail something like i.e. %dateeuro%? I expect this should get changed shortly. Most likely, %DATE% will get converted to the de-facto international standard DD MMM (as in 12 Aug 2004). Unlike DD/MM/ and MM/DD/, DD MMM can be read by anyone anywhere (with the other two, 02/03/2004 could be either February or March; it is impossible to tell). The true standard date format (MMDD) is too confusing for the average person to deal with, as it is rarely seen, but may get added as well. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] %date%
I'll be happy to take the ISO date format in any way I can. You see, whereas in the U.S. you may be used to the 08/12/04, it is often confused up here as there are some who insist on using 12/08/04. I always used to figure that anything with slashes and six digits would be the U.S. format, but that is not necessarily so anymore. Too many cash registers here now use DD/MM/YY. I really can't see anyone being confused by the ISO date, even those of you to the South of us.:-) Erik -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of R. Scott Perry Sent: Thursday, August 12, 2004 11:44 To: [EMAIL PROTECTED] Subject: RE: [Declude.Virus] %date% Yes, the international standard is indeed -MM-DD and if separated by hyphens as shown, there can be absolutely no confusion. There are two confusions here. One is whether or not the date format can be mis-read (for example, some people see 08-12-2004 as being today, while others see it as a date several months from now). That is not an issue with -MM-DD (technically, it could be confused with -DD-MM, but nobody is known to use that format). The other type of confusion is understanding what you are looking at. Someone in the U.S. is likely to see Received on: 2004-08-12 and think that it is some code. But, why can Declude not simply use the setting in Windows? Then everyone can use their own for their specific locality. Because the Internet is global, and only an extremely small percentage of Internet users have ever not connected to computers in countries that use a different date format. That's why we're encouraging the international-friendly date format. I think that adding code to make it easier for people to support a confusing non-standard isn't worth the time. :) -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] Off Topic I think
QIN and MPR files appear to be QucikBooks upgrade files. Do you have anything set to do an automatic upgrade from QB? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Link Brokers Support Sent: Friday, October 24, 2003 08:50 To: Declude Virus; Declude Junk Mail Subject: [Declude.Virus] Off Topic I think This morning our Quick Book Files were completely deleted. This happened automatically when our account department started up the PC. It just started deleting files. I DID a search on new file installed and Found a QIN and MPR file extension that showed up as new files at 5:30 am this morning. Can anyone shed some light and lead me in the right direction. Do I need to ban QIN and MPR files? Kevin Shimwell Link Brokers Group, LLC ( Support ) 401 Ist Ave. North North Myrtle Beach, SC 29582 Phone: 843-663-1004 Fax: 843-663-1007 Email: [EMAIL PROTECTED] 24/7 Support http://www.linkbrokers.com/support_ticket.cfm Support M-F 1-888-546-5631 [This E-mail scanned for viruses by Link Brokers Group, Inc Virus Protection] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] Swen... 200+ daily ..... is that all?
Title: Swen... 200+ daily Lucky you. Only 200 a day. My tech admin has to date received around 14,000 of them. You are apparently not active enough on newsgroups. :-) Erik -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]On Behalf Of Kami RazvanSent: Thursday, October 9, 2003 04:09To: Virus ListSubject: [Declude.Virus] Swen... 200+ daily Hi.. I have never seen a worst virus I (my email) am receiving 200+ viruses daily. We stopped notifying the receipient but report it to the sender. This is just out of this world I think it is not receiving much attention since it only targets the UseNet users and naturally mostly admins. This started with 10+ daily and now it is at 200+ .. Somehow I think if not fixed this may have the potential to overwhelm the networks.. Since Monday over 2000 viruses are trapped. The biggest ever in our system. Regards, Kami
[Declude.Virus] Do mail forwards get scanned?
Exactly what happens with addresses set to be forwarded? Incoming mail to [EMAIL PROTECTED] (which has no virus scanning) is forwarded to [EMAIL PROTECTED] (which does have virus scanning). Does the message get scanned? Erik --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
[Declude.Virus] Virus_domains file
Scott: I am not entirely sure that I have my virus_domains.txt file set up correctly. Normally I have the default set to OFF, and then list domains to be scanned with an ON parameter. However, due to the Sobig virus attack I decided to scan all domain, so I changed the default to ON. Here's the question: should the domains which were already there like this: domain.com ON be left alone, or should they be commented out, or does it matter? Which parameter, the default or the domain takes precedence? Erik --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] Manifest
I was just thinking along the same lines and have given instructions to my tech to produce stats for each local address to send to them when this is all over. Remember, we not only have to do our job, but also be seen to do it. :-) Erik -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of R. Scott Perry Sent: Sunday, August 24, 2003 13:12 To: [EMAIL PROTECTED] Subject: Re: [Declude.Virus] Manifest However, these notifications became a significant impact during the recent outbreak and now, I'm wondering about the possibility of incorporating a daily manifest, as an option. Do you think that a manifest option is a possibility for the future? That's an interesting idea, that would be very nice for accounts that get a lot of viruses (and in times like this, with Sobig.F). I'm not sure if this is something we will get to do, but it is something we have in the works for Declude JunkMail, so it might be easy to add to Declude Virus at the same time. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you have been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
