Re: [Declude.Virus] Banned Files

2004-04-27 Thread R. Scott Perry

Is there a variable that I can use in my BANnotify.eml that will report
the name of the file that was banned? I'm looking form something more
than the standard %BANEXT%
No, that is not currently possible.  Declude Virus only knows the 
extension, which is why it is not possible to use a variable for 
that.  This is something that we may change in the future, however.

   -Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers 
since 2000.
Declude Virus: Ultra reliable virus detection and the leader in mailserver 
vulnerability detection.
Find out what you've been missing: Ask for a free 30-day evaluation.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.


Re: [Declude.Virus] Banned Files

2004-04-27 Thread Greg Little
I'll second the need and usefullness of seeing the full file name.
(This becomes more complicated with files inside of zips)
Whenever I get a banned e-mail, I get to decide if it is normal customer 
traffic (send an explaination of what extensions are blocked and how to 
work around the blocking) or just a new virus or spam (send nothing).
So, the more info (like the full file name) I have, the better I can 
guess between customer and junk.

Greg
PS The new [Invalid SCR Vulnerability] and [Invalid COM Vulnerability] 
tests worked GREAT on Monday. They stopped lots of copies of Bagle.Z 
while we were waiting to get new virus definitions. Banned extensions 
got most (all?) of the others.

R. Scott Perry wrote:
No, that is not currently possible.  Declude Virus only knows the 
extension, which is why it is not possible to use a variable for 
that.  This is something that we may change in the future, however.

   -Scott

---
[This E-mail scanned for viruses by Findlay Internet]
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.


RE: [Declude.Virus] banned files

2002-09-27 Thread Kami Razvan

http://office.microsoft.com/assistance/2000/Out2ksecFAQ.aspx

Is this what you are looking for?

Kami

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of Sheldon Koehler
Sent: Friday, September 27, 2002 4:47 PM
To: [EMAIL PROTECTED]
Subject: [Declude.Virus] banned files


I tried a quick search but cannot find the URL to Microsofts site that
has a list of recommended file extensions to ban. I am starting on a FAQ
entry for our support page and want to include that URL in the
paragraph.

If anyone has it, I would appreciate it greatly!


Sheldon


Sheldon Koehler, Owner/Partnerhttp://www.tenforward.com
Ten Forward Communications   360-457-9023
Nationwide access, neighborhood support!

Whenever you find yourself on the side of the majority, it's time to
pause and reflect. Mark Twain


---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.


---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.



RE: [Declude.Virus] banned files

2002-09-27 Thread Jeff Kratka

This is what I found.

BANEXT  scr
BANEXT  pif
BANEXT  exe
BANEXT  bat
BANEXT  com
BANEXT  vbs
BANEXT  lnk
BANEXT  cmd
BANEXT  cpl
BANEXT  js
BANEXT  jse
BANEXT  ini
BANEXT  msi
BANEXT  msp
BANEXT  pcd
BANEXT  reg
BANEXT  sct
BANEXT  shb
BANEXT  shs
BANEXT  vb
BANEXT  vbe
BANEXT  wsc
BANEXT  wsf
BANEXT  wsh


Jeff

*
TymeWyse Internet
P.O.Box 84 - 583 N. Main St., Canyonville, OR 97417
tel/fax: (541) 839-6027  -  [EMAIL PROTECTED]
*


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Sheldon Koehler
Sent: Friday, September 27, 2002 1:47 PM
To: [EMAIL PROTECTED]
Subject: [Declude.Virus] banned files


I tried a quick search but cannot find the URL to Microsofts site that has a
list of recommended file extensions to ban. I am starting on a FAQ entry for
our support page and want to include that URL in the paragraph.

If anyone has it, I would appreciate it greatly!


Sheldon


Sheldon Koehler, Owner/Partnerhttp://www.tenforward.com
Ten Forward Communications   360-457-9023
Nationwide access, neighborhood support!

Whenever you find yourself on the side of the majority, it's time
to pause and reflect. Mark Twain


---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.



Re: [Declude.Virus] banned files

2002-09-27 Thread Sheldon Koehler

 http://office.microsoft.com/assistance/2000/Out2ksecFAQ.aspx

 Is this what you are looking for?

Yes, thanks! I had it once before and used it to make my banned file list
from at someone else's recommendation on this list. I figured it was an easy
way to have some Authority behind the file extensions.


Sheldon


Sheldon Koehler, Owner/Partnerhttp://www.tenforward.com
Ten Forward Communications   360-457-9023
Nationwide access, neighborhood support!

Whenever you find yourself on the side of the majority, it's time
to pause and reflect. Mark Twain


---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.



Re: [Declude.Virus] banned files

2002-09-27 Thread Bob McGregor

on this issue, anyone know of a link that explains the riks of URL types? We ban alot 
of these and I'm wondering what the risk is with the URL shortcut... anyone know???


On Friday, September 27, 2002 3:03 PM, Sheldon Koehler [EMAIL PROTECTED] wrote:
 http://office.microsoft.com/assistance/2000/Out2ksecFAQ.aspx

 Is this what you are looking for?

Yes, thanks! I had it once before and used it to make my banned file list
from at someone else's recommendation on this list. I figured it was an easy
way to have some Authority behind the file extensions.


Sheldon


Sheldon Koehler, Owner/Partnerhttp://www.tenforward.com
Ten Forward Communications   360-457-9023
Nationwide access, neighborhood support!

Whenever you find yourself on the side of the majority, it's time
to pause and reflect. Mark Twain


---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.


---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.



RE: [Declude.Virus] banned files

2002-09-27 Thread Bill Beach

recommended file extensions to ban

http://office.microsoft.com/assistance/2000/Out2ksecFAQ.aspx

This is the listing of files that are banned by the e-mail security update
for Outlook

-B


---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.



Re: [Declude.Virus] banned files

2002-09-27 Thread Bob McGregor

yep, I'm wondering about the .url extension

On Friday, September 27, 2002 4:51 PM, David Stavert [EMAIL PROTECTED] wrote:
When Microsofts own website lists the LNK shortcut as a risky extension then
it is a risky. The link can be a shortcut to a local file or program. While
probably not a good example it could be format c:


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Bob McGregor
Sent: Friday, September 27, 2002 4:07 PM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.Virus] banned files


on this issue, anyone know of a link that explains the riks of URL types? We
ban alot of these and I'm wondering what the risk is with the URL
shortcut... anyone know???


On Friday, September 27, 2002 3:03 PM, Sheldon Koehler
[EMAIL PROTECTED] wrote:
 http://office.microsoft.com/assistance/2000/Out2ksecFAQ.aspx

 Is this what you are looking for?

Yes, thanks! I had it once before and used it to make my banned file list
from at someone else's recommendation on this list. I figured it was an
easy
way to have some Authority behind the file extensions.


Sheldon


Sheldon Koehler, Owner/Partnerhttp://www.tenforward.com
Ten Forward Communications   360-457-9023
Nationwide access, neighborhood support!

Whenever you find yourself on the side of the majority, it's time
to pause and reflect. Mark Twain


---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.


---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.


---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.