[Declude.Virus] Fw: Undeliverable Mail
Hi, I have a problem which I want to solve by having Declude *not* send a message when the recipient is [EMAIL PROTECTED] Is there a way to do this? If not, is there another way to get rid of these messages? Met vriendelijke groet, Bonno Bloksma - Original Message - From: Postmaster [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Tuesday, September 09, 2003 8:54 AM Subject: Undeliverable Mail Invalid final delivery userid: [EMAIL PROTECTED] Original message follows. Date: Tue, 9 Sep 2003 08:54:07 +0200 Message-Id: [EMAIL PROTECTED] Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii From: Postmaster [EMAIL PROTECTED] Reply-To: [EMAIL PROTECTED] To: [EMAIL PROTECTED] Subject: WARNING: YOU MAY HAVE A VIRUS X-Mailer: IMail v8.01 X-Declude-Sender: [EMAIL PROTECTED] [127.0.0.1] X-Note: This E-mail was scanned by Declude JunkMail (www.declude.com) for spam. De Declude antivirus software op tio.nl heeft een virus gevonden in een e-mail die u had gestuurd aan [EMAIL PROTECTED] Het betreft het [Outlook 'MIME Header' Vulnerability] virus in de Log.zip.scr bijlage. Het onderwerp van uw bericht was Undelivered Mail Returned to Sender -Log. Het bericht is in quarantaine geplaatst en wordt niet afgeleverd. --- The Declude Virus software on tio.nl has reported that you sent an E-mail to [EMAIL PROTECTED], containing the [Outlook 'MIME Header' Vulnerability] virus in the Log.zip.scr attachment. The subject of the E-mail was Undelivered Mail Returned to Sender -Log. The E-mail containing the virus has been quarantined to prevent further damage. Headers Follow: Received: from mail.tio.nl [213.197.11.46] by tio.nl (SMTPD32-8.01) id A90C73E013A; Tue, 09 Sep 2003 08:54:04 +0200 From: Mail Delivery System[EMAIL PROTECTED] To: [EMAIL PROTECTED] Subject: Undelivered Mail Returned to Sender -Log Date: Tue,09 Sep 2003 08:52:52 PM X-Mailer: Microsoft Outlook Express 5.50.4133.2400 MIME-Version: 1.0 Content-Type: multipart/mixed; boundary=mouxulg Message-Id: [EMAIL PROTECTED] --- [This E-mail scanned for viruses by Declude Virus using f-prot and Sophos] --- [This E-mail scanned for viruses by Declude Virus using f-prot and Sophos] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
[Declude.Virus] Fw: Undeliverable Mail
Hi, Which keyword do I need to add to the *.eml file to see which attachment (filename) was stopped? I have not been able to find an appropriate keyword but I might have missed it. Met vriendelijke groet, Bonno Bloksma - Original Message - From: Postmaster [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Tuesday, September 09, 2003 1:36 PM Subject: Undeliverable Mail Delivery Failed: [EMAIL PROTECTED] The mail server for tio.nl does not accept E-mail with attachments that contain the pif extension. Original message follows: Received: from mail.tio.nl [213.197.11.46] by tio.nl (SMTPD32-8.01) id AB5752F0052; Tue, 09 Sep 2003 13:36:55 +0200 From: branda_hilhorst[EMAIL PROTECTED] To: [EMAIL PROTECTED] Subject: Log Date: Tue,09 Sep 2003 13:35:42 PM X-Mailer: Microsoft Outlook Express 5.50.4133.2400 MIME-Version: 1.0 Content-Type: multipart/mixed; boundary=owuokss Message-Id: [EMAIL PROTECTED] --- [This E-mail scanned for viruses by Declude Virus using f-prot and Sophos] --- [This E-mail scanned for viruses by Declude Virus using f-prot and Sophos] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
Re: [Declude.Virus] Fw: Undeliverable Mail
I have a problem which I want to solve by having Declude *not* send a message when the recipient is [EMAIL PROTECTED] Is there a way to do this? If not, is there another way to get rid of these messages? You can add a line SKIPIFRECIP [EMAIL PROTECTED] (with just one space or tab on the line, and not adding any extra blank lines) to the appropriate \IMail\Declude\*.eml files. This will work with v1.75 and higher. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you have been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
Re: [Declude.Virus] Fw: Undeliverable Mail
Which keyword do I need to add to the *.eml file to see which attachment (filename) was stopped? I have not been able to find an appropriate keyword but I might have missed it. You can use %VIRUSFILE% for that. Note that %VIRUSFILE% only works when a virus is detected (not for banned file extensions). There is no equivalent for banned files. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you have been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
Re: [Declude.Virus] Fw: Undeliverable Mail
For banned file extensions this will give the name of the extension but not the full file name %BANEXT% Sincerely, William J. Baumbach II [EMAIL PROTECTED] 9975 Pennsylvania Ave. Manassas, Va. 20110-2028 Ph: 703-367-7900 ext:1708 Fax: 703-691-0946 - - Original Message - From: R. Scott Perry [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Tuesday, September 09, 2003 10:20 AM Subject: Re: [Declude.Virus] Fw: Undeliverable Mail Which keyword do I need to add to the *.eml file to see which attachment (filename) was stopped? I have not been able to find an appropriate keyword but I might have missed it. You can use %VIRUSFILE% for that. Note that %VIRUSFILE% only works when a virus is detected (not for banned file extensions). There is no equivalent for banned files. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you have been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com. [ scanned for spam to: [EMAIL PROTECTED] incoming http://www.DcMetroNet.com on 09/09/2003 at 10:26:46-0500et. ] [ scanned for viruses to: [EMAIL PROTECTED] incoming http://www.DcMetroNet.com on 09/09/2003 at 10:26:48-0500et. ] [ scanned for spam to: [EMAIL PROTECTED] outgoing http://www.DcMetroNet.com on 09/09/2003 at 10:55:35-0500et. ] This email message is for the sole use of the intended recipient(s) and may contain confidential and privileged information. Any unauthorized review, use, disclosure or distribution of this email is prohibited. If you are not the intended recipient, please contact the sender and destroy all paper and electronic copies of this message. [ scanned for viruses to: [EMAIL PROTECTED] outgoing http://www.DcMetroNet.com on 09/09/2003 at 10:55:39-0500et. ] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] Fw: Undeliverable Mail
Which keyword do I need to add to the *.eml file to see which attachment (filename) was stopped? I have not been able to find an appropriate keyword but I might have missed it. You can use %VIRUSFILE% for that. Note that %VIRUSFILE% only works when a virus is detected (not for banned file extensions). There is no equivalent for banned files. But %BANEXT% does show the extension caught. Scott, would it be possible to add a new variable, %ATTACHMENTS% that would show the file name of all attachments? John Tolmachoff MCSE CSSA Engineer/Consultant eServices For You www.eservicesforyou.com --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.