Re: [Declude.Virus] Slightly OT: Encrypting or Securing Email Content

2005-10-12 Thread Kevin Rogers
Yes, but it's $100 per user and (correct me if I'm wrong here), with PGP 
both the sender and the recipient need to have PGP installed in order to 
use it.  Which is most likely out of the question for us.  But I've 
checked their site and I'm not positive about this.



Darrell ([EMAIL PROTECTED]) wrote:


Kevin,
I thought PGP had a desktop version that integrates directly with 
outlook?

Darrell

Check out http://www.invariantsystems.com for utilities for Declude 
And Imail.  IMail/Declude Overflow Queue Monitoring, SURBL/URI 
integration, MRTG Integration, and Log Parsers.


Kevin Rogers writes:

We're looking for a simple way to opportunistically allow our users 
to encrypt or password-protect certain emails and/or their 
attachments that contain sensitive data.  We're running Declude Pro 
and have banned EZIP extensions (the highly recommended suggestion 
from several people on this forum), so that kinda rules out PKZIP and 
any kind of ZIP program (because as soon as you password-protect a 
ZIP file, it becomes an EZIP file).  We looked at PGP, but it seems 
very complex and seems to require a hardware proxy in between our 
mail server and the Net.  Is there a simple and effective way to 
encrypt or password protect documents for email transmission that 
doesn't cause problems with Imail or Declude and doesn't require 
software to be installed on the recipient's end?

Thanks.
Kevin
---
[This E-mail was scanned for viruses.]
---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.




---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.
---
[This E-mail was scanned for viruses.]




---
[This E-mail was scanned for viruses.]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.


RE: [Declude.Virus] Slightly OT: Encrypting or Securing Email Content

2005-10-12 Thread Douglas Cohn
Hey stupid me but why not use a file transfer program for transferring files
and not worry about what you block in email.  That is what FTP was invented
for anyway.  If you have any type of Intranet or help desk system you should
have a place that allows users to both upload files and download files.

Email was never designed as a method of transferring files.  Even though it
is used that way all too often.  A Simple web pahe with ASPUpload and
another page with the shared files would solve your issue.  Make it more
complex and set access rights on the files as well.

Just my two cents

Doug 

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Kevin Rogers
Sent: Tuesday, October 11, 2005 1:26 AM
To: Declude.Virus@declude.com
Subject: [Declude.Virus] Slightly OT: Encrypting or Securing Email Content

We're looking for a simple way to opportunistically allow our users to
encrypt or password-protect certain emails and/or their attachments that
contain sensitive data.  We're running Declude Pro and have banned EZIP
extensions (the highly recommended suggestion from several people on this
forum), so that kinda rules out PKZIP and any kind of ZIP program (because
as soon as you password-protect a ZIP file, it becomes an EZIP file).  We
looked at PGP, but it seems very complex and seems to require a hardware
proxy in between our mail server and the Net.  Is there a simple and
effective way to encrypt or password protect documents for email
transmission that doesn't cause problems with Imail or Declude and doesn't
require software to be installed on the recipient's end?

Thanks.

Kevin
---
[This E-mail was scanned for viruses.]

---
This E-mail came from the Declude.Virus mailing list.  To unsubscribe, just
send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.
---
[This E-mail scanned for viruses by Declude Virus]

---
[This E-mail scanned for viruses by Declude Virus]


---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.


Re: [Declude.Virus] Slightly OT: Encrypting or Securing Email Content

2005-10-11 Thread Michael Thomas - Mathbox
Kevin,

I am licensed for Declude 3.x, but have not yet installed it. I am waiting
until I think the dust has settled. So, I am running Declude Version 1.82.
At version 1.82, Declude virus scanning was enabled or disabled at the email
account level or domain level. If enabled, the rule set was one set for ALL
enabled accounts. With  that said, here is how we handle that issue.

We have many medical clients that receive encrypted ZIP files from labs.
There are other cases, but that is the predominate one. For those customers,
we create a special recipient email account. In Declude, we disable virus
scanning for that email account. In the email account, I setup IMail filters
on the FROM address. If the message doesn't come from a desireable address,
it gets deleted. That makes the sending email address TRUSTED. Some labs
will send a key in the subject. In that case, we take advantage and filter
on the subject also.

Mike

- Original Message - 
From: Kevin Rogers [EMAIL PROTECTED]
To: Declude.Virus@declude.com
Sent: Tuesday, October 11, 2005 1:26 AM
Subject: [Declude.Virus] Slightly OT: Encrypting or Securing Email Content


 We're looking for a simple way to opportunistically allow our users to
 encrypt or password-protect certain emails and/or their attachments that
 contain sensitive data.  We're running Declude Pro and have banned EZIP
 extensions (the highly recommended suggestion from several people on
 this forum), so that kinda rules out PKZIP and any kind of ZIP program
 (because as soon as you password-protect a ZIP file, it becomes an EZIP
 file).  We looked at PGP, but it seems very complex and seems to require
 a hardware proxy in between our mail server and the Net.  Is there a
 simple and effective way to encrypt or password protect documents for
 email transmission that doesn't cause problems with Imail or Declude and
 doesn't require software to be installed on the recipient's end?

 Thanks.

 Kevin
 ---
 [This E-mail was scanned for viruses.]

 ---
 This E-mail came from the Declude.Virus mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.Virus.The archives can be found
 at http://www.mail-archive.com.




---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.


Re: [Declude.Virus] Slightly OT: Encrypting or Securing Email Content

2005-10-11 Thread Michael Thomas - Mathbox
Kevin,

Also, for those one-time events, rename the ZIP file before attachement,
like MyEncrypted.Zip is renamed to MyEncrypted.Zip.Txt, with a message to
the recipient to rename the file.

Mike


- Original Message - 
From: Kevin Rogers [EMAIL PROTECTED]
To: Declude.Virus@declude.com
Sent: Tuesday, October 11, 2005 1:26 AM
Subject: [Declude.Virus] Slightly OT: Encrypting or Securing Email Content


 We're looking for a simple way to opportunistically allow our users to
 encrypt or password-protect certain emails and/or their attachments that
 contain sensitive data.  We're running Declude Pro and have banned EZIP
 extensions (the highly recommended suggestion from several people on
 this forum), so that kinda rules out PKZIP and any kind of ZIP program
 (because as soon as you password-protect a ZIP file, it becomes an EZIP
 file).  We looked at PGP, but it seems very complex and seems to require
 a hardware proxy in between our mail server and the Net.  Is there a
 simple and effective way to encrypt or password protect documents for
 email transmission that doesn't cause problems with Imail or Declude and
 doesn't require software to be installed on the recipient's end?

 Thanks.

 Kevin
 ---
 [This E-mail was scanned for viruses.]

 ---
 This E-mail came from the Declude.Virus mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.Virus.The archives can be found
 at http://www.mail-archive.com.




---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.


Re: [Declude.Virus] Slightly OT: Encrypting or Securing Email Content

2005-10-11 Thread Kevin Rogers

But even in Declude's virus.cfg file it says

#
# The BANEXT EZIP line blocks all encrypted .ZIP and .RAR files, which 
is necessary
# to be fully protected against viruses (since it is impossible to 
detect a well-

# constructed virus within an encrypted .ZIP or .RAR file).
#

Should I ban EZIPs or not?  I always thought I had to.  It'd be nice to 
be able to allow them through since creating password-protected ZIP 
files is one of the easiest ways to add a decent amount of security to 
email attachments.


Kevin


John T (Lists) wrote:


FYI, I do not ban EZIP outright. What I do is BANEZIPEXTs which will ban an
EZIP file containing a file that is banned.

John T
eServices For You


 


-Original Message-
From: [EMAIL PROTECTED]
   


[mailto:[EMAIL PROTECTED]
 


On Behalf Of Kevin Rogers
Sent: Monday, October 10, 2005 10:26 PM
To: Declude.Virus@declude.com
Subject: [Declude.Virus] Slightly OT: Encrypting or Securing Email Content

We're looking for a simple way to opportunistically allow our users to
encrypt or password-protect certain emails and/or their attachments that
contain sensitive data.  We're running Declude Pro and have banned EZIP
extensions (the highly recommended suggestion from several people on
this forum), so that kinda rules out PKZIP and any kind of ZIP program
(because as soon as you password-protect a ZIP file, it becomes an EZIP
file).  We looked at PGP, but it seems very complex and seems to require
a hardware proxy in between our mail server and the Net.  Is there a
simple and effective way to encrypt or password protect documents for
email transmission that doesn't cause problems with Imail or Declude and
doesn't require software to be installed on the recipient's end?

Thanks.

Kevin
---
[This E-mail was scanned for viruses.]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.
   



---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.
---
[This E-mail was scanned for viruses.]



 


---
[This E-mail was scanned for viruses.]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.


Re: [Declude.Virus] Slightly OT: Encrypting or Securing Email Content

2005-10-11 Thread Darin Cox
If you have Declude Virus/EVA Pro you can switch to banning extensions
within zips.  With Standard, you may want to continue to ban encrypted zips.

In either case, you will probably want to send out notices for banned files,
notifying the intended recipient that a file sent to them was blocked.
Include a link in the notification for them to requeue the message if it was
legit and they want to receive it.  Scripts to requeue messages have been
posted to the list in the past, but they are very simple to create by just
moving the Q and D files back to the spool directory... possibly going as
far as launching the SMTP32 process to immediately send the message if you
don't want your user to wait for the next queue run.

Darin.


- Original Message - 
From: Kevin Rogers [EMAIL PROTECTED]
To: Declude.Virus@declude.com
Sent: Tuesday, October 11, 2005 1:26 AM
Subject: [Declude.Virus] Slightly OT: Encrypting or Securing Email Content


We're looking for a simple way to opportunistically allow our users to
encrypt or password-protect certain emails and/or their attachments that
contain sensitive data.  We're running Declude Pro and have banned EZIP
extensions (the highly recommended suggestion from several people on
this forum), so that kinda rules out PKZIP and any kind of ZIP program
(because as soon as you password-protect a ZIP file, it becomes an EZIP
file).  We looked at PGP, but it seems very complex and seems to require
a hardware proxy in between our mail server and the Net.  Is there a
simple and effective way to encrypt or password protect documents for
email transmission that doesn't cause problems with Imail or Declude and
doesn't require software to be installed on the recipient's end?

Thanks.

Kevin
---
[This E-mail was scanned for viruses.]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.


Re: [Declude.Virus] Slightly OT: Encrypting or Securing Email Content

2005-10-11 Thread Darrell \([EMAIL PROTECTED])
Kevin, 

I thought PGP had a desktop version that integrates directly with outlook? 


Darrell

Check out http://www.invariantsystems.com for utilities for Declude And 
Imail.  IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG 
Integration, and Log Parsers. 



Kevin Rogers writes: 

We're looking for a simple way to opportunistically allow our users to 
encrypt or password-protect certain emails and/or their attachments that 
contain sensitive data.  We're running Declude Pro and have banned EZIP 
extensions (the highly recommended suggestion from several people on this 
forum), so that kinda rules out PKZIP and any kind of ZIP program (because 
as soon as you password-protect a ZIP file, it becomes an EZIP file).  We 
looked at PGP, but it seems very complex and seems to require a hardware 
proxy in between our mail server and the Net.  Is there a simple and 
effective way to encrypt or password protect documents for email 
transmission that doesn't cause problems with Imail or Declude and doesn't 
require software to be installed on the recipient's end? 

Thanks. 


Kevin
---
[This E-mail was scanned for viruses.] 


---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.



---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.


Re: [Declude.Virus] Slightly OT: Encrypting or Securing Email Content

2005-10-11 Thread Kevin Rogers
So it's this forum's consensus that if I have PRO I should not block all 
EZIPs - I should just block the other extensions even if they are found 
within ZIP files?


I do send out notices when a file gets blocked, but I don't have a 
requeue script in place.  I'll search for one and see what I can do.  
Thanks.




Darin Cox wrote:


If you have Declude Virus/EVA Pro you can switch to banning extensions
within zips.  With Standard, you may want to continue to ban encrypted zips.

In either case, you will probably want to send out notices for banned files,
notifying the intended recipient that a file sent to them was blocked.
Include a link in the notification for them to requeue the message if it was
legit and they want to receive it.  Scripts to requeue messages have been
posted to the list in the past, but they are very simple to create by just
moving the Q and D files back to the spool directory... possibly going as
far as launching the SMTP32 process to immediately send the message if you
don't want your user to wait for the next queue run.

Darin.


- Original Message - 
From: Kevin Rogers [EMAIL PROTECTED]

To: Declude.Virus@declude.com
Sent: Tuesday, October 11, 2005 1:26 AM
Subject: [Declude.Virus] Slightly OT: Encrypting or Securing Email Content


We're looking for a simple way to opportunistically allow our users to
encrypt or password-protect certain emails and/or their attachments that
contain sensitive data.  We're running Declude Pro and have banned EZIP
extensions (the highly recommended suggestion from several people on
this forum), so that kinda rules out PKZIP and any kind of ZIP program
(because as soon as you password-protect a ZIP file, it becomes an EZIP
file).  We looked at PGP, but it seems very complex and seems to require
a hardware proxy in between our mail server and the Net.  Is there a
simple and effective way to encrypt or password protect documents for
email transmission that doesn't cause problems with Imail or Declude and
doesn't require software to be installed on the recipient's end?

Thanks.

Kevin
---
[This E-mail was scanned for viruses.]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.
---
[This E-mail was scanned for viruses.]



 


---
[This E-mail was scanned for viruses.]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.


Re: [Declude.Virus] Slightly OT: Encrypting or Securing Email Content

2005-10-11 Thread Scott Fisher

I block all encrypted zips based on the fact that I can't virus scan them.

But then again I'm slightly paranoid and should not be trusted with sharp 
objects.


- Original Message - 
From: Kevin Rogers [EMAIL PROTECTED]

To: Declude.Virus@declude.com
Sent: Tuesday, October 11, 2005 3:08 PM
Subject: Re: [Declude.Virus] Slightly OT: Encrypting or Securing Email 
Content



So it's this forum's consensus that if I have PRO I should not block all 
EZIPs - I should just block the other extensions even if they are found 
within ZIP files?


I do send out notices when a file gets blocked, but I don't have a requeue 
script in place.  I'll search for one and see what I can do.  Thanks.




Darin Cox wrote:


If you have Declude Virus/EVA Pro you can switch to banning extensions
within zips.  With Standard, you may want to continue to ban encrypted 
zips.


In either case, you will probably want to send out notices for banned 
files,

notifying the intended recipient that a file sent to them was blocked.
Include a link in the notification for them to requeue the message if it 
was

legit and they want to receive it.  Scripts to requeue messages have been
posted to the list in the past, but they are very simple to create by just
moving the Q and D files back to the spool directory... possibly going as
far as launching the SMTP32 process to immediately send the message if you
don't want your user to wait for the next queue run.

Darin.


- Original Message - 
From: Kevin Rogers [EMAIL PROTECTED]

To: Declude.Virus@declude.com
Sent: Tuesday, October 11, 2005 1:26 AM
Subject: [Declude.Virus] Slightly OT: Encrypting or Securing Email Content


We're looking for a simple way to opportunistically allow our users to
encrypt or password-protect certain emails and/or their attachments that
contain sensitive data.  We're running Declude Pro and have banned EZIP
extensions (the highly recommended suggestion from several people on
this forum), so that kinda rules out PKZIP and any kind of ZIP program
(because as soon as you password-protect a ZIP file, it becomes an EZIP
file).  We looked at PGP, but it seems very complex and seems to require
a hardware proxy in between our mail server and the Net.  Is there a
simple and effective way to encrypt or password protect documents for
email transmission that doesn't cause problems with Imail or Declude and
doesn't require software to be installed on the recipient's end?

Thanks.

Kevin
---
[This E-mail was scanned for viruses.]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.
---
[This E-mail was scanned for viruses.]





---
[This E-mail was scanned for viruses.]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.



---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.


RE: [Declude.Virus] Slightly OT: Encrypting or Securing Email Content

2005-10-11 Thread John T \(Lists\)
What is wrong with sharp objects? They make nice clean cuts.

Now, it's the blunt ones that I worry about.

John T
eServices For You

 -Original Message-
 From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]
 On Behalf Of Scott Fisher
 Sent: Tuesday, October 11, 2005 1:44 PM
 To: Declude.Virus@declude.com
 Subject: Re: [Declude.Virus] Slightly OT: Encrypting or Securing Email
Content
 
 I block all encrypted zips based on the fact that I can't virus scan them.
 
 But then again I'm slightly paranoid and should not be trusted with sharp
 objects.
 
 - Original Message -
 From: Kevin Rogers [EMAIL PROTECTED]
 To: Declude.Virus@declude.com
 Sent: Tuesday, October 11, 2005 3:08 PM
 Subject: Re: [Declude.Virus] Slightly OT: Encrypting or Securing Email
 Content
 
 
  So it's this forum's consensus that if I have PRO I should not block all
  EZIPs - I should just block the other extensions even if they are found
  within ZIP files?
 
  I do send out notices when a file gets blocked, but I don't have a
requeue
  script in place.  I'll search for one and see what I can do.  Thanks.
 
 
 
  Darin Cox wrote:
 
 If you have Declude Virus/EVA Pro you can switch to banning extensions
 within zips.  With Standard, you may want to continue to ban encrypted
 zips.
 
 In either case, you will probably want to send out notices for banned
 files,
 notifying the intended recipient that a file sent to them was blocked.
 Include a link in the notification for them to requeue the message if it
 was
 legit and they want to receive it.  Scripts to requeue messages have
been
 posted to the list in the past, but they are very simple to create by
just
 moving the Q and D files back to the spool directory... possibly going
as
 far as launching the SMTP32 process to immediately send the message if
you
 don't want your user to wait for the next queue run.
 
 Darin.
 
 
 - Original Message -
 From: Kevin Rogers [EMAIL PROTECTED]
 To: Declude.Virus@declude.com
 Sent: Tuesday, October 11, 2005 1:26 AM
 Subject: [Declude.Virus] Slightly OT: Encrypting or Securing Email
Content
 
 
 We're looking for a simple way to opportunistically allow our users to
 encrypt or password-protect certain emails and/or their attachments that
 contain sensitive data.  We're running Declude Pro and have banned EZIP
 extensions (the highly recommended suggestion from several people on
 this forum), so that kinda rules out PKZIP and any kind of ZIP program
 (because as soon as you password-protect a ZIP file, it becomes an EZIP
 file).  We looked at PGP, but it seems very complex and seems to require
 a hardware proxy in between our mail server and the Net.  Is there a
 simple and effective way to encrypt or password protect documents for
 email transmission that doesn't cause problems with Imail or Declude and
 doesn't require software to be installed on the recipient's end?
 
 Thanks.
 
 Kevin
 ---
 [This E-mail was scanned for viruses.]
 
 ---
 This E-mail came from the Declude.Virus mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.Virus.The archives can be found
 at http://www.mail-archive.com.
 
 ---
 This E-mail came from the Declude.Virus mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.Virus.The archives can be found
 at http://www.mail-archive.com.
 ---
 [This E-mail was scanned for viruses.]
 
 
 
 
  ---
  [This E-mail was scanned for viruses.]
 
  ---
  This E-mail came from the Declude.Virus mailing list.  To
  unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
  type unsubscribe Declude.Virus.The archives can be found
  at http://www.mail-archive.com.
 
 
 ---
 This E-mail came from the Declude.Virus mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.Virus.The archives can be found
 at http://www.mail-archive.com.

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.


Re: [Declude.Virus] Slightly OT: Encrypting or Securing Email Content

2005-10-11 Thread Darrell \([EMAIL PROTECTED])
Please no talk about sharp objects - I just had a vasectomy a couple of 
hours ago - oh the pain...


Darrell

---
Check out http://www.invariantsystems.com for utilities for Declude And 
Imail.  IMail Queue Monitoring, Declude Overflow Queue Monitoring, SURBL/URI 
integration, MRTG Integration, and Log Parsers.


- Original Message - 
From: John T (Lists) [EMAIL PROTECTED]

To: Declude.Virus@declude.com
Sent: Tuesday, October 11, 2005 5:00 PM
Subject: RE: [Declude.Virus] Slightly OT: Encrypting or Securing Email 
Content



What is wrong with sharp objects? They make nice clean cuts.

Now, it's the blunt ones that I worry about.

John T
eServices For You


-Original Message-
From: [EMAIL PROTECTED]

[mailto:[EMAIL PROTECTED]

On Behalf Of Scott Fisher
Sent: Tuesday, October 11, 2005 1:44 PM
To: Declude.Virus@declude.com
Subject: Re: [Declude.Virus] Slightly OT: Encrypting or Securing Email

Content


I block all encrypted zips based on the fact that I can't virus scan them.

But then again I'm slightly paranoid and should not be trusted with sharp
objects.

- Original Message -
From: Kevin Rogers [EMAIL PROTECTED]
To: Declude.Virus@declude.com
Sent: Tuesday, October 11, 2005 3:08 PM
Subject: Re: [Declude.Virus] Slightly OT: Encrypting or Securing Email
Content


 So it's this forum's consensus that if I have PRO I should not block all
 EZIPs - I should just block the other extensions even if they are found
 within ZIP files?

 I do send out notices when a file gets blocked, but I don't have a

requeue

 script in place.  I'll search for one and see what I can do.  Thanks.



 Darin Cox wrote:

If you have Declude Virus/EVA Pro you can switch to banning extensions
within zips.  With Standard, you may want to continue to ban encrypted
zips.

In either case, you will probably want to send out notices for banned
files,
notifying the intended recipient that a file sent to them was blocked.
Include a link in the notification for them to requeue the message if it
was
legit and they want to receive it.  Scripts to requeue messages have

been

posted to the list in the past, but they are very simple to create by

just

moving the Q and D files back to the spool directory... possibly going

as

far as launching the SMTP32 process to immediately send the message if

you

don't want your user to wait for the next queue run.

Darin.


- Original Message -
From: Kevin Rogers [EMAIL PROTECTED]
To: Declude.Virus@declude.com
Sent: Tuesday, October 11, 2005 1:26 AM
Subject: [Declude.Virus] Slightly OT: Encrypting or Securing Email

Content



We're looking for a simple way to opportunistically allow our users to
encrypt or password-protect certain emails and/or their attachments that
contain sensitive data.  We're running Declude Pro and have banned EZIP
extensions (the highly recommended suggestion from several people on
this forum), so that kinda rules out PKZIP and any kind of ZIP program
(because as soon as you password-protect a ZIP file, it becomes an EZIP
file).  We looked at PGP, but it seems very complex and seems to require
a hardware proxy in between our mail server and the Net.  Is there a
simple and effective way to encrypt or password protect documents for
email transmission that doesn't cause problems with Imail or Declude and
doesn't require software to be installed on the recipient's end?

Thanks.

Kevin
---
[This E-mail was scanned for viruses.]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.
---
[This E-mail was scanned for viruses.]




 ---
 [This E-mail was scanned for viruses.]

 ---
 This E-mail came from the Declude.Virus mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.Virus.The archives can be found
 at http://www.mail-archive.com.


---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.


---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.


RE: [Declude.Virus] Slightly OT: Encrypting or Securing Email Content

2005-10-11 Thread Colbeck, Andrew
How about cock of the walk jokes? 

 -Original Message-
 From: [EMAIL PROTECTED] 
 [mailto:[EMAIL PROTECTED] On Behalf Of Darrell 
 ([EMAIL PROTECTED])
 Sent: Tuesday, October 11, 2005 2:44 PM
 To: Declude.Virus@declude.com
 Subject: Re: [Declude.Virus] Slightly OT: Encrypting or 
 Securing Email Content
 
 Please no talk about sharp objects - I just had a vasectomy a 
 couple of hours ago - oh the pain...
 
 Darrell
 
 ---
 Check out http://www.invariantsystems.com for utilities for 
 Declude And Imail.  IMail Queue Monitoring, Declude Overflow 
 Queue Monitoring, SURBL/URI integration, MRTG Integration, 
 and Log Parsers.
 
 - Original Message -
 From: John T (Lists) [EMAIL PROTECTED]
 To: Declude.Virus@declude.com
 Sent: Tuesday, October 11, 2005 5:00 PM
 Subject: RE: [Declude.Virus] Slightly OT: Encrypting or 
 Securing Email Content
 
 
 What is wrong with sharp objects? They make nice clean cuts.
 
 Now, it's the blunt ones that I worry about.
 
 John T
 eServices For You
 
  -Original Message-
  From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED]
  On Behalf Of Scott Fisher
  Sent: Tuesday, October 11, 2005 1:44 PM
  To: Declude.Virus@declude.com
  Subject: Re: [Declude.Virus] Slightly OT: Encrypting or 
 Securing Email
 Content
 
  I block all encrypted zips based on the fact that I can't 
 virus scan them.
 
  But then again I'm slightly paranoid and should not be trusted with 
  sharp objects.
 
  - Original Message -
  From: Kevin Rogers [EMAIL PROTECTED]
  To: Declude.Virus@declude.com
  Sent: Tuesday, October 11, 2005 3:08 PM
  Subject: Re: [Declude.Virus] Slightly OT: Encrypting or 
 Securing Email 
  Content
 
 
   So it's this forum's consensus that if I have PRO I 
 should not block 
   all EZIPs - I should just block the other extensions even if they 
   are found within ZIP files?
  
   I do send out notices when a file gets blocked, but I don't have a
 requeue
   script in place.  I'll search for one and see what I can 
 do.  Thanks.
  
  
  
   Darin Cox wrote:
  
  If you have Declude Virus/EVA Pro you can switch to banning 
  extensions within zips.  With Standard, you may want to 
 continue to 
  ban encrypted zips.
  
  In either case, you will probably want to send out notices for 
  banned files, notifying the intended recipient that a 
 file sent to 
  them was blocked.
  Include a link in the notification for them to requeue 
 the message 
  if it was legit and they want to receive it.  Scripts to requeue 
  messages have
 been
  posted to the list in the past, but they are very simple 
 to create 
  by
 just
  moving the Q and D files back to the spool directory... possibly 
  going
 as
  far as launching the SMTP32 process to immediately send 
 the message 
  if
 you
  don't want your user to wait for the next queue run.
  
  Darin.
  
  
  - Original Message -
  From: Kevin Rogers [EMAIL PROTECTED]
  To: Declude.Virus@declude.com
  Sent: Tuesday, October 11, 2005 1:26 AM
  Subject: [Declude.Virus] Slightly OT: Encrypting or Securing Email
 Content
  
  
  We're looking for a simple way to opportunistically allow 
 our users 
  to encrypt or password-protect certain emails and/or their 
  attachments that contain sensitive data.  We're running 
 Declude Pro 
  and have banned EZIP extensions (the highly recommended 
 suggestion 
  from several people on this forum), so that kinda rules out PKZIP 
  and any kind of ZIP program (because as soon as you 
 password-protect 
  a ZIP file, it becomes an EZIP file).  We looked at PGP, but it 
  seems very complex and seems to require a hardware proxy 
 in between 
  our mail server and the Net.  Is there a simple and 
 effective way to 
  encrypt or password protect documents for email transmission that 
  doesn't cause problems with Imail or Declude and doesn't 
 require software to be installed on the recipient's end?
  
  Thanks.
  
  Kevin
  ---
  [This E-mail was scanned for viruses.]
  
  ---
  This E-mail came from the Declude.Virus mailing list.  To 
  unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
  type unsubscribe Declude.Virus.The archives can be found
  at http://www.mail-archive.com.
  
  ---
  This E-mail came from the Declude.Virus mailing list.  To 
  unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
  type unsubscribe Declude.Virus.The archives can be found
  at http://www.mail-archive.com.
  ---
  [This E-mail was scanned for viruses.]
  
  
  
  
   ---
   [This E-mail was scanned for viruses.]
  
   ---
   This E-mail came from the Declude.Virus mailing list.  To 
   unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
   type unsubscribe Declude.Virus.The archives can be found
   at http://www.mail-archive.com.
  
 
  ---
  This E-mail came from the Declude.Virus mailing list.  To 
 unsubscribe, 
  just send an E-mail to [EMAIL PROTECTED], and
  type unsubscribe Declude.Virus.The archives

RE: [Declude.Virus] Slightly OT: Encrypting or Securing Email Content

2005-10-11 Thread John T \(Lists\)
Yah, those doctors and their instruments. Ouch.

John T
eServices For You


 -Original Message-
 From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]
 On Behalf Of Darrell ([EMAIL PROTECTED])
 Sent: Tuesday, October 11, 2005 2:44 PM
 To: Declude.Virus@declude.com
 Subject: Re: [Declude.Virus] Slightly OT: Encrypting or Securing Email
Content
 
 Please no talk about sharp objects - I just had a vasectomy a couple of
 hours ago - oh the pain...
 
 Darrell
 
 ---
 Check out http://www.invariantsystems.com for utilities for Declude And
 Imail.  IMail Queue Monitoring, Declude Overflow Queue Monitoring,
SURBL/URI
 integration, MRTG Integration, and Log Parsers.
 
 - Original Message -
 From: John T (Lists) [EMAIL PROTECTED]
 To: Declude.Virus@declude.com
 Sent: Tuesday, October 11, 2005 5:00 PM
 Subject: RE: [Declude.Virus] Slightly OT: Encrypting or Securing Email
 Content
 
 
 What is wrong with sharp objects? They make nice clean cuts.
 
 Now, it's the blunt ones that I worry about.
 
 John T
 eServices For You
 
  -Original Message-
  From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED]
  On Behalf Of Scott Fisher
  Sent: Tuesday, October 11, 2005 1:44 PM
  To: Declude.Virus@declude.com
  Subject: Re: [Declude.Virus] Slightly OT: Encrypting or Securing Email
 Content
 
  I block all encrypted zips based on the fact that I can't virus scan
them.
 
  But then again I'm slightly paranoid and should not be trusted with
sharp
  objects.
 
  - Original Message -
  From: Kevin Rogers [EMAIL PROTECTED]
  To: Declude.Virus@declude.com
  Sent: Tuesday, October 11, 2005 3:08 PM
  Subject: Re: [Declude.Virus] Slightly OT: Encrypting or Securing Email
  Content
 
 
   So it's this forum's consensus that if I have PRO I should not block
all
   EZIPs - I should just block the other extensions even if they are
found
   within ZIP files?
  
   I do send out notices when a file gets blocked, but I don't have a
 requeue
   script in place.  I'll search for one and see what I can do.  Thanks.
  
  
  
   Darin Cox wrote:
  
  If you have Declude Virus/EVA Pro you can switch to banning extensions
  within zips.  With Standard, you may want to continue to ban encrypted
  zips.
  
  In either case, you will probably want to send out notices for banned
  files,
  notifying the intended recipient that a file sent to them was blocked.
  Include a link in the notification for them to requeue the message if
it
  was
  legit and they want to receive it.  Scripts to requeue messages have
 been
  posted to the list in the past, but they are very simple to create by
 just
  moving the Q and D files back to the spool directory... possibly going
 as
  far as launching the SMTP32 process to immediately send the message if
 you
  don't want your user to wait for the next queue run.
  
  Darin.
  
  
  - Original Message -
  From: Kevin Rogers [EMAIL PROTECTED]
  To: Declude.Virus@declude.com
  Sent: Tuesday, October 11, 2005 1:26 AM
  Subject: [Declude.Virus] Slightly OT: Encrypting or Securing Email
 Content
  
  
  We're looking for a simple way to opportunistically allow our users to
  encrypt or password-protect certain emails and/or their attachments
that
  contain sensitive data.  We're running Declude Pro and have banned
EZIP
  extensions (the highly recommended suggestion from several people on
  this forum), so that kinda rules out PKZIP and any kind of ZIP program
  (because as soon as you password-protect a ZIP file, it becomes an
EZIP
  file).  We looked at PGP, but it seems very complex and seems to
require
  a hardware proxy in between our mail server and the Net.  Is there a
  simple and effective way to encrypt or password protect documents for
  email transmission that doesn't cause problems with Imail or Declude
and
  doesn't require software to be installed on the recipient's end?
  
  Thanks.
  
  Kevin
  ---
  [This E-mail was scanned for viruses.]
  
  ---
  This E-mail came from the Declude.Virus mailing list.  To
  unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
  type unsubscribe Declude.Virus.The archives can be found
  at http://www.mail-archive.com.
  
  ---
  This E-mail came from the Declude.Virus mailing list.  To
  unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
  type unsubscribe Declude.Virus.The archives can be found
  at http://www.mail-archive.com.
  ---
  [This E-mail was scanned for viruses.]
  
  
  
  
   ---
   [This E-mail was scanned for viruses.]
  
   ---
   This E-mail came from the Declude.Virus mailing list.  To
   unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
   type unsubscribe Declude.Virus.The archives can be found
   at http://www.mail-archive.com.
  
 
  ---
  This E-mail came from the Declude.Virus mailing list.  To
  unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
  type unsubscribe Declude.Virus.The archives can be found
  at http://www.mail

Re: [Declude.Virus] Slightly OT: Encrypting or Securing Email Content

2005-10-11 Thread Kevin Rogers

Ok OK already.  lol

So some people block EZIPs and some don't.  If you don't block EZIPs but 
do block certain file extensions within EZIPs, is it the same security 
as if you blocked them outright?  Or are there ways to slip bad stuff 
through an EZIP even if you block most bad extensions?  Or can you 
really not scan EZIPs as well as other files.


Thanks


Scott Fisher wrote:

I block all encrypted zips based on the fact that I can't virus scan 
them.


But then again I'm slightly paranoid and should not be trusted with 
sharp objects.


- Original Message - From: Kevin Rogers [EMAIL PROTECTED]
To: Declude.Virus@declude.com
Sent: Tuesday, October 11, 2005 3:08 PM
Subject: Re: [Declude.Virus] Slightly OT: Encrypting or Securing Email 
Content



So it's this forum's consensus that if I have PRO I should not block 
all EZIPs - I should just block the other extensions even if they are 
found within ZIP files?


I do send out notices when a file gets blocked, but I don't have a 
requeue script in place.  I'll search for one and see what I can do.  
Thanks.




Darin Cox wrote:


If you have Declude Virus/EVA Pro you can switch to banning extensions
within zips.  With Standard, you may want to continue to ban 
encrypted zips.


In either case, you will probably want to send out notices for 
banned files,

notifying the intended recipient that a file sent to them was blocked.
Include a link in the notification for them to requeue the message 
if it was
legit and they want to receive it.  Scripts to requeue messages have 
been
posted to the list in the past, but they are very simple to create 
by just
moving the Q and D files back to the spool directory... possibly 
going as
far as launching the SMTP32 process to immediately send the message 
if you

don't want your user to wait for the next queue run.

Darin.


- Original Message - From: Kevin Rogers 
[EMAIL PROTECTED]

To: Declude.Virus@declude.com
Sent: Tuesday, October 11, 2005 1:26 AM
Subject: [Declude.Virus] Slightly OT: Encrypting or Securing Email 
Content



We're looking for a simple way to opportunistically allow our users to
encrypt or password-protect certain emails and/or their attachments 
that

contain sensitive data.  We're running Declude Pro and have banned EZIP
extensions (the highly recommended suggestion from several people on
this forum), so that kinda rules out PKZIP and any kind of ZIP program
(because as soon as you password-protect a ZIP file, it becomes an EZIP
file).  We looked at PGP, but it seems very complex and seems to 
require

a hardware proxy in between our mail server and the Net.  Is there a
simple and effective way to encrypt or password protect documents for
email transmission that doesn't cause problems with Imail or Declude 
and

doesn't require software to be installed on the recipient's end?

Thanks.

Kevin
---
[This E-mail was scanned for viruses.]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.
---
[This E-mail was scanned for viruses.]





---
[This E-mail was scanned for viruses.]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.



---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.
---
[This E-mail was scanned for viruses.]




---
[This E-mail was scanned for viruses.]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.


Re: [Declude.Virus] Slightly OT: Encrypting or Securing Email Content

2005-10-11 Thread Michael Thomas - Mathbox
Hah,

On that note:

Is it safe? Answer me! Is it safe?

For those of you that do not recognize it, it is from Marthon Man (1976)
starring Dustin Hoffman.

A graduate student and obsessive runner in New York is drawn into a
mysterious plot involving his globe trotting brother, his European
girlfriend and a Nazi war criminal in hiding. Includes one of the most
agonizing torture scenes ever portrayed. Is it safe? You'll never see your
dentist the same way again.

If you have never seen it, rent it and enjoy

Mike

- Original Message - 
From: John T (Lists) [EMAIL PROTECTED]
To: Declude.Virus@declude.com
Sent: Tuesday, October 11, 2005 6:14 PM
Subject: RE: [Declude.Virus] Slightly OT: Encrypting or Securing Email
Content


Yah, those doctors and their instruments. Ouch.

John T
eServices For You


 -Original Message-
 From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]
 On Behalf Of Darrell ([EMAIL PROTECTED])
 Sent: Tuesday, October 11, 2005 2:44 PM
 To: Declude.Virus@declude.com
 Subject: Re: [Declude.Virus] Slightly OT: Encrypting or Securing Email
Content

 Please no talk about sharp objects - I just had a vasectomy a couple of
 hours ago - oh the pain...

 Darrell

 ---
 Check out http://www.invariantsystems.com for utilities for Declude And
 Imail.  IMail Queue Monitoring, Declude Overflow Queue Monitoring,
SURBL/URI
 integration, MRTG Integration, and Log Parsers.

 - Original Message -
 From: John T (Lists) [EMAIL PROTECTED]
 To: Declude.Virus@declude.com
 Sent: Tuesday, October 11, 2005 5:00 PM
 Subject: RE: [Declude.Virus] Slightly OT: Encrypting or Securing Email
 Content


 What is wrong with sharp objects? They make nice clean cuts.

 Now, it's the blunt ones that I worry about.

 John T
 eServices For You

  -Original Message-
  From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED]
  On Behalf Of Scott Fisher
  Sent: Tuesday, October 11, 2005 1:44 PM
  To: Declude.Virus@declude.com
  Subject: Re: [Declude.Virus] Slightly OT: Encrypting or Securing Email
 Content
 
  I block all encrypted zips based on the fact that I can't virus scan
them.
 
  But then again I'm slightly paranoid and should not be trusted with
sharp
  objects.
 
  - Original Message -
  From: Kevin Rogers [EMAIL PROTECTED]
  To: Declude.Virus@declude.com
  Sent: Tuesday, October 11, 2005 3:08 PM
  Subject: Re: [Declude.Virus] Slightly OT: Encrypting or Securing Email
  Content
 
 
   So it's this forum's consensus that if I have PRO I should not block
all
   EZIPs - I should just block the other extensions even if they are
found
   within ZIP files?
  
   I do send out notices when a file gets blocked, but I don't have a
 requeue
   script in place.  I'll search for one and see what I can do.  Thanks.
  
  
  
   Darin Cox wrote:
  
  If you have Declude Virus/EVA Pro you can switch to banning extensions
  within zips.  With Standard, you may want to continue to ban encrypted
  zips.
  
  In either case, you will probably want to send out notices for banned
  files,
  notifying the intended recipient that a file sent to them was blocked.
  Include a link in the notification for them to requeue the message if
it
  was
  legit and they want to receive it.  Scripts to requeue messages have
 been
  posted to the list in the past, but they are very simple to create by
 just
  moving the Q and D files back to the spool directory... possibly going
 as
  far as launching the SMTP32 process to immediately send the message if
 you
  don't want your user to wait for the next queue run.
  
  Darin.
  
  
  - Original Message -
  From: Kevin Rogers [EMAIL PROTECTED]
  To: Declude.Virus@declude.com
  Sent: Tuesday, October 11, 2005 1:26 AM
  Subject: [Declude.Virus] Slightly OT: Encrypting or Securing Email
 Content
  
  
  We're looking for a simple way to opportunistically allow our users to
  encrypt or password-protect certain emails and/or their attachments
that
  contain sensitive data.  We're running Declude Pro and have banned
EZIP
  extensions (the highly recommended suggestion from several people on
  this forum), so that kinda rules out PKZIP and any kind of ZIP program
  (because as soon as you password-protect a ZIP file, it becomes an
EZIP
  file).  We looked at PGP, but it seems very complex and seems to
require
  a hardware proxy in between our mail server and the Net.  Is there a
  simple and effective way to encrypt or password protect documents for
  email transmission that doesn't cause problems with Imail or Declude
and
  doesn't require software to be installed on the recipient's end?
  
  Thanks.
  
  Kevin
  ---
  [This E-mail was scanned for viruses.]
  
  ---
  This E-mail came from the Declude.Virus mailing list.  To
  unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
  type unsubscribe Declude.Virus.The archives can be found
  at http://www.mail-archive.com.
  
  ---
  This E-mail came from the Declude.Virus mailing

RE: [Declude.Virus] Slightly OT: Encrypting or Securing Email Content

2005-10-11 Thread John T \(Lists\)
Well, the answer lies within how those features were introduced. When the
first wave of viruses came out using zip files, we blocked zip files
entirely. But then we asked for a way to pass EZIP files, so Scott added
that feature whereby BANEXT ZIP did not ban EZIPs, instead introducing
BANEXT EZIP. Then when waves of viruses started to come out using EZIP
files, the first thing we did was ban then and then asked Scott to come up
with a work around. He did this by introducing BANZIPEXTs and BANEZIPEXTS
which only banned a zip or EZIP if it had a file in it that was banned. But
that is only for Pro version.

So if you are using Pro version, you can just use BANZIPEXTS and BANEZIPEXTS
if desired, leaving BANEXT ZIP and BANEXT EZIP in the virus.cfg but
commented out. That way, if there is a sudden need to do so, it can be done
quickly.

John T
eServices For You


 -Original Message-
 From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]
 On Behalf Of Kevin Rogers
 Sent: Tuesday, October 11, 2005 3:36 PM
 To: Declude.Virus@declude.com
 Subject: Re: [Declude.Virus] Slightly OT: Encrypting or Securing Email
Content
 
 Ok OK already.  lol
 
 So some people block EZIPs and some don't.  If you don't block EZIPs but
 do block certain file extensions within EZIPs, is it the same security
 as if you blocked them outright?  Or are there ways to slip bad stuff
 through an EZIP even if you block most bad extensions?  Or can you
 really not scan EZIPs as well as other files.
 
 Thanks
 
 
 Scott Fisher wrote:
 
  I block all encrypted zips based on the fact that I can't virus scan
  them.
 
  But then again I'm slightly paranoid and should not be trusted with
  sharp objects.
 
  - Original Message - From: Kevin Rogers [EMAIL PROTECTED]
  To: Declude.Virus@declude.com
  Sent: Tuesday, October 11, 2005 3:08 PM
  Subject: Re: [Declude.Virus] Slightly OT: Encrypting or Securing Email
  Content
 
 
  So it's this forum's consensus that if I have PRO I should not block
  all EZIPs - I should just block the other extensions even if they are
  found within ZIP files?
 
  I do send out notices when a file gets blocked, but I don't have a
  requeue script in place.  I'll search for one and see what I can do.
  Thanks.
 
 
 
  Darin Cox wrote:
 
  If you have Declude Virus/EVA Pro you can switch to banning extensions
  within zips.  With Standard, you may want to continue to ban
  encrypted zips.
 
  In either case, you will probably want to send out notices for
  banned files,
  notifying the intended recipient that a file sent to them was blocked.
  Include a link in the notification for them to requeue the message
  if it was
  legit and they want to receive it.  Scripts to requeue messages have
  been
  posted to the list in the past, but they are very simple to create
  by just
  moving the Q and D files back to the spool directory... possibly
  going as
  far as launching the SMTP32 process to immediately send the message
  if you
  don't want your user to wait for the next queue run.
 
  Darin.
 
 
  - Original Message - From: Kevin Rogers
  [EMAIL PROTECTED]
  To: Declude.Virus@declude.com
  Sent: Tuesday, October 11, 2005 1:26 AM
  Subject: [Declude.Virus] Slightly OT: Encrypting or Securing Email
  Content
 
 
  We're looking for a simple way to opportunistically allow our users to
  encrypt or password-protect certain emails and/or their attachments
  that
  contain sensitive data.  We're running Declude Pro and have banned
EZIP
  extensions (the highly recommended suggestion from several people on
  this forum), so that kinda rules out PKZIP and any kind of ZIP program
  (because as soon as you password-protect a ZIP file, it becomes an
EZIP
  file).  We looked at PGP, but it seems very complex and seems to
  require
  a hardware proxy in between our mail server and the Net.  Is there a
  simple and effective way to encrypt or password protect documents for
  email transmission that doesn't cause problems with Imail or Declude
  and
  doesn't require software to be installed on the recipient's end?
 
  Thanks.
 
  Kevin
  ---
  [This E-mail was scanned for viruses.]
 
  ---
  This E-mail came from the Declude.Virus mailing list.  To
  unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
  type unsubscribe Declude.Virus.The archives can be found
  at http://www.mail-archive.com.
 
  ---
  This E-mail came from the Declude.Virus mailing list.  To
  unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
  type unsubscribe Declude.Virus.The archives can be found
  at http://www.mail-archive.com.
  ---
  [This E-mail was scanned for viruses.]
 
 
 
 
  ---
  [This E-mail was scanned for viruses.]
 
  ---
  This E-mail came from the Declude.Virus mailing list.  To
  unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
  type unsubscribe Declude.Virus.The archives can be found
  at http://www.mail-archive.com.
 
 
  ---
  This E-mail came from the Declude.Virus mailing list

RE: [Declude.Virus] Slightly OT: Encrypting or Securing Email Content

2005-10-11 Thread Marc Catuogno
You have a user base that is educated and that you trust enough to click a
link that would send them a potential virus?  I so envy you...

I'm scared to let them open and send and receive regular e-mail.  I had one
user ready to open an account for someone in Nigera.

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Darin Cox
Sent: Tuesday, October 11, 2005 8:14 AM
To: Declude.Virus@declude.com
Subject: Re: [Declude.Virus] Slightly OT: Encrypting or Securing Email
Content

If you have Declude Virus/EVA Pro you can switch to banning extensions
within zips.  With Standard, you may want to continue to ban encrypted zips.

In either case, you will probably want to send out notices for banned files,
notifying the intended recipient that a file sent to them was blocked.
Include a link in the notification for them to requeue the message if it was
legit and they want to receive it.  Scripts to requeue messages have been
posted to the list in the past, but they are very simple to create by just
moving the Q and D files back to the spool directory... possibly going as
far as launching the SMTP32 process to immediately send the message if you
don't want your user to wait for the next queue run.

Darin.


- Original Message - 
From: Kevin Rogers [EMAIL PROTECTED]
To: Declude.Virus@declude.com
Sent: Tuesday, October 11, 2005 1:26 AM
Subject: [Declude.Virus] Slightly OT: Encrypting or Securing Email Content


We're looking for a simple way to opportunistically allow our users to
encrypt or password-protect certain emails and/or their attachments that
contain sensitive data.  We're running Declude Pro and have banned EZIP
extensions (the highly recommended suggestion from several people on
this forum), so that kinda rules out PKZIP and any kind of ZIP program
(because as soon as you password-protect a ZIP file, it becomes an EZIP
file).  We looked at PGP, but it seems very complex and seems to require
a hardware proxy in between our mail server and the Net.  Is there a
simple and effective way to encrypt or password protect documents for
email transmission that doesn't cause problems with Imail or Declude and
doesn't require software to be installed on the recipient's end?

Thanks.

Kevin
---
[This E-mail was scanned for viruses.]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.
---
[This E-mail scanned for viruses by Declude Virus]



---
[This E-mail scanned for viruses by Declude Virus]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.


[Declude.Virus] Slightly OT: Encrypting or Securing Email Content

2005-10-10 Thread Kevin Rogers
We're looking for a simple way to opportunistically allow our users to 
encrypt or password-protect certain emails and/or their attachments that 
contain sensitive data.  We're running Declude Pro and have banned EZIP 
extensions (the highly recommended suggestion from several people on 
this forum), so that kinda rules out PKZIP and any kind of ZIP program 
(because as soon as you password-protect a ZIP file, it becomes an EZIP 
file).  We looked at PGP, but it seems very complex and seems to require 
a hardware proxy in between our mail server and the Net.  Is there a 
simple and effective way to encrypt or password protect documents for 
email transmission that doesn't cause problems with Imail or Declude and 
doesn't require software to be installed on the recipient's end?


Thanks.

Kevin
---
[This E-mail was scanned for viruses.]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.