Re: AV Plug-ins vs. Not
Monday, April 22, 2002, 7:11:48 AM, Mandara scribbled: M> By default "receive" and "delete" is checked. So you have to un-check M> "receive" and leave "delete" as is, if you don't like some mail. So THAT'S what the problem's been. Thanks! Mike smime.p7s Description: S/MIME Cryptographic Signature
Re: AV Plug-ins vs. Not
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On Mon, 22 Apr 2002, at 06:10:56 -0500 Michael wrote:
>>> How does one actually use dispatch from within TB to delete mail at
>>> the server?
DH>> When you open the Mail Dispatcher and it connects, you see the
DH>> different columns. If a message is only checked for deletion, TB! does
DH>> send the DELETE command to the server.
MD> OK, I'm slow, so bear with me... :) That means ONLY the delete flag
MD> should be checked?
Yep. :)
All what is checked will work, all what doesn't will not.
By default "receive" and "delete" is checked. So you have to un-check
"receive" and leave "delete" as is, if you don't like some mail.
Mandara
- --
He's kind and gen'rous to the sick,
He'd never spread a nasty rumour,
He never gets on people's wick,
And doesn't laugh at toilet humour...
(__) If you need this key:
('')
\/
-BEGIN PGP SIGNATURE-
iD8DBQE8w/4Zvgcu6yV9/zYRAquZAJ9Z4J/AMTJm5azd8qjXbV+AMNmeqwCeOmhw
gJIxx/e4bjboydR3Cz1cqhU=
=JWqJ
-END PGP SIGNATURE-
Current Ver: 1.60c
FAQ: http://faq.thebat.dutaint.com
Unsubscribe: mailto:[EMAIL PROTECTED]
Archives : http://tbudl.thebat.dutaint.com
Moderators : mailto:[EMAIL PROTECTED]
TBTech List: mailto:[EMAIL PROTECTED]
Re: AV Plug-ins vs. Not
Monday, April 22, 2002, 3:52:03 AM, Dierk scribbled: >> How does one actually use dispatch from within TB to delete mail at >> the server? DH> When you open the Mail Dispatcher and it connects, you see the DH> different columns. If a message is only checked for deletion, TB! does DH> send the DELETE command to the server. OK, I'm slow, so bear with me... :) That means ONLY the delete flag should be checked? Mike smime.p7s Description: S/MIME Cryptographic Signature
Re: AV Plug-ins vs. Not
Hello ETM! On Monday, April 22, 2002 at 9:50:50 AM you wrote: > How does one actually use dispatch from within TB to delete mail at > the server? When you open the Mail Dispatcher and it connects, you see the different columns. If a message is only checked for deletion, TB! does send the DELETE command to the server. If a message is not deleted, either the command is not received or not understood by the server. -- Dierk Haasis http://www.Write4U.de http://Interest.Write4U.de/pongo PGP keys available: mailto:[EMAIL PROTECTED]?Subject=SendMyPGPkeys The Bat 1.60d on Windows 95 4.0 1212 C Education has produced a vast population able to read but unable to distinguish what is worth reading. (G.M. Trevelyan) Current Ver: 1.60c FAQ: http://faq.thebat.dutaint.com Unsubscribe: mailto:[EMAIL PROTECTED] Archives : http://tbudl.thebat.dutaint.com Moderators : mailto:[EMAIL PROTECTED] TBTech List: mailto:[EMAIL PROTECTED]
Re: AV Plug-ins vs. Not
I have had two occasions when TB and my AV program circled the campfire as TB downloaded to a tmp file and the AV program notified me I had received an exploit virus. On each occasion, I went out to the web and deleted the offending emails at the server. Then it was necessary to delete TB's tmp files to satisfy (shut up) the AV program. I had the impression that using dispatch would allow me to get to those emails and to delete them at the server level. However, I was not successful. How does one actually use dispatch from within TB to delete mail at the server? Both of the occasions involved false positives when someone had written asking about the html exploit virus and quoted a bit too much of the string involved but it gave me a chance to see the interaction between TB and the AV program. Elaine Hello Roelof On Friday, April 19, 2002, you wrote > A program that monitors all your incoming traffic, will block TB's > downloading of infected messages. That way TB can't finish it's > receiving messages and will try to download the same messages over and > over, because the server doesn't delete them. Current Ver: 1.60c FAQ: http://faq.thebat.dutaint.com Unsubscribe: mailto:[EMAIL PROTECTED] Archives : http://tbudl.thebat.dutaint.com Moderators : mailto:[EMAIL PROTECTED] TBTech List: mailto:[EMAIL PROTECTED]
Re: AV Plug-ins vs. Not
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Hi Miguel,
On Fri, 19 Apr 2002, at 17:47:28 +0200 you wrote:
>> I can't find any advantage even of monitoring traffic at all. By my
>> experience it is much faster (and cheaper, regarding resources and
>> online time) to use some real-time AV monitor which will react if you
>> try to deal with infected attachment.
MAU> There is definitely an advantage in monitoring traffic because not al
MAU> virus are spread in attached files.
[...]
I agree. And this is only spot which is not quite clear to me: if some
nasty html code arrive in mail (not attached but "embedded") would a
real-time AV monitor detect it? Since we are using Bat, which has own
rendering html machine, and since the trojan we consider here is
writen for IE engine, it seems that there is no need to be nervous.
Any way, a good AV monitor should discover *any* virus activities,
regardless way of its execution. So if I could go to see this message
with embedded html, and if I activate some nasty link, script or
whatever - then AV should react, in a same secure way as if virus
would start from an attachment. Am I right?
I just cannot see why would POP scanner discover something which is
not possible for HD scanner?
If this AV database would discover something during POP scanning, it
must discover it on HD too.
Mandara
- --
(__) If you need this key:
('')
\/
-BEGIN PGP SIGNATURE-
iD8DBQE8wX0Nvgcu6yV9/zYRAmX9AKCkHE7Bkp9DIVqtuPh0dzhSCb4ITgCgttLb
K1msoh6tAso2FsIvm7YpGxI=
=BFcC
-END PGP SIGNATURE-
Current Ver: 1.60c
FAQ: http://faq.thebat.dutaint.com
Unsubscribe: mailto:[EMAIL PROTECTED]
Archives : http://tbudl.thebat.dutaint.com
Moderators : mailto:[EMAIL PROTECTED]
TBTech List: mailto:[EMAIL PROTECTED]
Re: AV Plug-ins vs. Not
On Friday, April 19, 2002, 4:42:05 PM, Nick Andriash wrote: > Would you mind terribly trimming down the number of characters you > use for a quote prefix? I second that. It's very confusing since with the long prefixes they don't get tagged as replies with my settings and it's much more confusing to try to follow. -- Dwight A. Corrin P O Box 47828 Wichita KS 67201-7828 316.263.9706 fax 316.263.6385 mailto:[EMAIL PROTECTED] Using The Bat! 1.60 on Windows XP version 5,1 Current Ver: 1.60c FAQ: http://faq.thebat.dutaint.com Unsubscribe: mailto:[EMAIL PROTECTED] Archives : http://tbudl.thebat.dutaint.com Moderators : mailto:[EMAIL PROTECTED] TBTech List: mailto:[EMAIL PROTECTED]
Re: AV Plug-ins vs. Not
Hello Lynna Lunsford, On Friday, April 19 2002 at 02:50 PM PDT, you wrote: > Considering I have had the program installed less than > a week, would you send me detailed instructions on how > to accomplish this? Sure no problem... it is an often overlooked preference setting. There are actually two settings that you should set: 1) Options/Editor Preferences/General... down at the bottom you will see "Quote Name Limit". This one is really for your benefit, and should reflect the number of characters *you* would like to see behind ">" that turn up as quoted material. 2) Accounts/Properties/Templates/Reply... under "Sender information used for quotation"... you can set it as you like, but "Initials" or even "First Name" seems to be more a norm than having both the first and last name. I would say 50% choose "None" or "Initials". While you are in the Account Properties... at the bottom of the page you will see two little check boxes. You should make sure that only the bottom one is checked. -- Nick Andriash Courtenay, B.C. Canada Current Ver: 1.60c FAQ: http://faq.thebat.dutaint.com Unsubscribe: mailto:[EMAIL PROTECTED] Archives : http://tbudl.thebat.dutaint.com Moderators : mailto:[EMAIL PROTECTED] TBTech List: mailto:[EMAIL PROTECTED]
Re[2]: AV Plug-ins vs. Not
Hello Nick, Friday, April 19, 2002, 1:42:05 PM, you wrote: Nick Andriash> Would you mind terribly trimming down the number of characters you use for Nick Andriash> a quote prefix? By using first and last name... which is only for TB users Nick Andriash> and only if they have their preferences set to allow for it... you Nick Andriash> minimise the actual number of characters for comments. Based on a 74 Nick Andriash> character normal line length, one can only type in 55 or so characters of Nick Andriash> actual text before the line starts to wrap. Nick Andriash> Thanks very much.. Considering I have had the program installed less than a week, would you send me detailed instructions on how to accomplish this? I am perfectly willing to accommodate I just need to know how this is done. -- Best regards, Lynnamailto:[EMAIL PROTECTED] Current Ver: 1.60c FAQ: http://faq.thebat.dutaint.com Unsubscribe: mailto:[EMAIL PROTECTED] Archives : http://tbudl.thebat.dutaint.com Moderators : mailto:[EMAIL PROTECTED] TBTech List: mailto:[EMAIL PROTECTED]
Re: AV Plug-ins vs. Not
Hello Lynna, On Friday, April 19 2002 at 02:19 PM PDT, you wrote: > Roelof Otten> over, because the server doesn't delete them. > > Here is what AVG has to say about it (I pasted from AVG's own help > files): Would you mind terribly trimming down the number of characters you use for a quote prefix? By using first and last name... which is only for TB users and only if they have their preferences set to allow for it... you minimise the actual number of characters for comments. Based on a 74 character normal line length, one can only type in 55 or so characters of actual text before the line starts to wrap. Thanks very much.. -- Nick Andriash Courtenay, B.C. Canada Current Ver: 1.60c FAQ: http://faq.thebat.dutaint.com Unsubscribe: mailto:[EMAIL PROTECTED] Archives : http://tbudl.thebat.dutaint.com Moderators : mailto:[EMAIL PROTECTED] TBTech List: mailto:[EMAIL PROTECTED]
Re[2]: AV Plug-ins vs. Not
Hi Roelof, Friday, April 19, 2002, 6:10:35 AM, you wrote: Roelof Otten> A program that monitors all your incoming traffic, will block TB's Roelof Otten> downloading of infected messages. That way TB can't finish it's Roelof Otten> receiving messages and will try to download the same messages over and Roelof Otten> over, because the server doesn't delete them. Here is what AVG has to say about it (I pasted from AVG's own help files): "AVG Resident Shield is a program that is installed on your computer as a part of the AVG System. It runs automatically when Windows starts. The program monitors important system functions related to all your internal files and removable media. Once you access a file from your hard drive, a floppy, CD-ROM or Web site, AVG's Resident Shield checks the data before you are allowed to work with it to insure it is virus free. This check is so quick, you will not notice a delay in operation. " -- Regards, Lynna mailto:[EMAIL PROTECTED] Using The Bat! v1.60c on Windows XP 5.1 Build 2600 Current Ver: 1.60c FAQ: http://faq.thebat.dutaint.com Unsubscribe: mailto:[EMAIL PROTECTED] Archives : http://tbudl.thebat.dutaint.com Moderators : mailto:[EMAIL PROTECTED] TBTech List: mailto:[EMAIL PROTECTED]
Re[2]: AV Plug-ins vs. Not
Hello Miguel, Friday, April 19, 2002, 7:47:28 AM, you wrote: Miguel A. Urech> There is definitely an advantage in monitoring traffic because not al Miguel A. Urech> virus are spread in attached files. As an example, take a look at: Miguel A. Urech> <[EMAIL PROTECTED]">mid:[EMAIL PROTECTED]> in this list with Subject: Miguel A. Urech> IFrame.Exploit virus Miguel A. Urech> and http://vil.nai.com/vil/content/v_98918.htm Also my experience with AVG was that it notifies me as I download e-mail. If a e-mail is infected, it will grab the infected file and place it in the virus vault. This happens when I am downloading, not just when I open the e-mail or the attachment. I like that, it never gets a chance to be opened or to infect. You have the choice once a file is in the vault to try and clean it or you can delete it entirely. Very seldom is one "cleanable" (IMHO). -- Best regards, Lynnamailto:[EMAIL PROTECTED] Current Ver: 1.60c FAQ: http://faq.thebat.dutaint.com Unsubscribe: mailto:[EMAIL PROTECTED] Archives : http://tbudl.thebat.dutaint.com Moderators : mailto:[EMAIL PROTECTED] TBTech List: mailto:[EMAIL PROTECTED]
Re: AV Plug-ins vs. Not
Hello Mandara, > I can't find any advantage even of monitoring traffic at all. By my > experience it is much faster (and cheaper, regarding resources and > online time) to use some real-time AV monitor which will react if you > try to deal with infected attachment. There is definitely an advantage in monitoring traffic because not al virus are spread in attached files. As an example, take a look at: <[EMAIL PROTECTED]">mid:[EMAIL PROTECTED]> in this list with Subject: IFrame.Exploit virus and http://vil.nai.com/vil/content/v_98918.htm -- Best regards, Miguel A. Urech (El Escorial - Spain) Using The Bat! v1.60c Current Ver: 1.60c FAQ: http://faq.thebat.dutaint.com Unsubscribe: mailto:[EMAIL PROTECTED] Archives : http://tbudl.thebat.dutaint.com Moderators : mailto:[EMAIL PROTECTED] TBTech List: mailto:[EMAIL PROTECTED]
Re: AV Plug-ins vs. Not
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On Fri, 19 Apr 2002, at 07:22:44 -0500 Michael wrote:
MD> I've seen the discussions concerning anti-virus plug-ins, and I'm
MD> wondering what advantage that has over a program that monitors all
MD> incoming traffic.
I can't find any advantage even of monitoring traffic at all. By my
experience it is much faster (and cheaper, regarding resources and
online time) to use some real-time AV monitor which will react if you
try to deal with infected attachment.
Mandara
- --
(__) If you need this key:
('')
\/
-BEGIN PGP SIGNATURE-
iD8DBQE8wDMwvgcu6yV9/zYRAtOdAJ9k8NBzffvOJfBzizmMbf6Ffqk/BwCfYe/F
dS37j3/pyUFoQkAVdNOfiTM=
=bdyQ
-END PGP SIGNATURE-
Current Ver: 1.60c
FAQ: http://faq.thebat.dutaint.com
Unsubscribe: mailto:[EMAIL PROTECTED]
Archives : http://tbudl.thebat.dutaint.com
Moderators : mailto:[EMAIL PROTECTED]
TBTech List: mailto:[EMAIL PROTECTED]
Re: AV Plug-ins vs. Not
Hello Roelof, Friday, April 19, 2002, 3:10:35 PM, you wrote: RO> A program that monitors all your incoming traffic, will block TB's RO> downloading of infected messages. That way TB can't finish it's RO> receiving messages and will try to download the same messages over and RO> over, because the server doesn't delete them. I have never experienced this. AVG from grisoft allows the downloads to finish, and only lets me know that I have a virus when I go to open the attachment/email. Doesn't affect downloading whatsoever whichis logical as a virus is not going to execute just by being downloaded. -- Best regards, Johnmailto:[EMAIL PROTECTED] Current Ver: 1.60c FAQ: http://faq.thebat.dutaint.com Unsubscribe: mailto:[EMAIL PROTECTED] Archives : http://tbudl.thebat.dutaint.com Moderators : mailto:[EMAIL PROTECTED] TBTech List: mailto:[EMAIL PROTECTED]
Re: AV Plug-ins vs. Not
Hello Michael, On Fri, 19 Apr 2002 07:22:44 -0500GMT (19-4-02, 14:22 +0200GMT, where I live), you wrote: MD> I've seen the discussions concerning anti-virus plug-ins, and I'm MD> wondering what advantage that has over a program that monitors all MD> incoming traffic. A program that monitors all your incoming traffic, will block TB's downloading of infected messages. That way TB can't finish it's receiving messages and will try to download the same messages over and over, because the server doesn't delete them. -- Groetjes, Roelof Current Ver: 1.60c FAQ: http://faq.thebat.dutaint.com Unsubscribe: mailto:[EMAIL PROTECTED] Archives : http://tbudl.thebat.dutaint.com Moderators : mailto:[EMAIL PROTECTED] TBTech List: mailto:[EMAIL PROTECTED]
Re: AV Plug-ins vs. Not
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Greetings Lynna On 19 April 2002 at 04:42:01 -0800 (which was 13:42 where I live) Lynna Lunsford emanated these words of wisdom MD>> I've seen the discussions concerning anti-virus plug-ins, and I'm MD>> wondering what advantage that has over a program that monitors all MD>> incoming traffic. LL> Actually AVG has a resident shield that does monitor all traffic LL> Internet or otherwise. Even without the plug in it would work, LL> theoretically anyway. According to info at the grisoft.com web, every LL> time you access a file whether it on a disk or during a download LL> "resident shield" is checking / monitoring / runs in the background. I LL> don't know the advantages over the plug in, I am using both, I figured LL> it TB web site had it available for download they did so for a reason. LL> But as a newbie I have limited knowledge on the need /reasoning of it. LL> All I know is it works for me. Sorry I don't think so, because attachments are encoded AVG can not check them with out the plug in. However AVG will / should check any attachments when you want to run it because they get un-packed/extracted first. - -- Regards, ___ David | SecureBat! 1.60 d / iKey1000 | E-mailaholics | _| Win 2K Server 5.0.2195 SP2 | International | | Dafynition #287: TSR - Trash System Randomly | ' -BEGIN PGP SIGNATURE- Version: GnuPG v1.0.6-2 (MingW32) Comment: GnuPG Signed, sealed, delivered. iD8DBQE8wBNx+Yrx5mUPRTQRAguTAKDDsp+JfbLTcXG7J29VXHQ/BGoI6wCghKUL aBDj8JVkJePlRX1dIOJmdrk= =y0RY -END PGP SIGNATURE- Current Ver: 1.60c FAQ: http://faq.thebat.dutaint.com Unsubscribe: mailto:[EMAIL PROTECTED] Archives : http://tbudl.thebat.dutaint.com Moderators : mailto:[EMAIL PROTECTED] TBTech List: mailto:[EMAIL PROTECTED]
Re: AV Plug-ins vs. Not
Hi Michael, Friday, April 19, 2002, 4:22:44 AM, you wrote: Michael Disabato> Folks, Michael Disabato> I've seen the discussions concerning anti-virus plug-ins, and I'm Michael Disabato> wondering what advantage that has over a program that monitors all Michael Disabato> incoming traffic. Michael Disabato> Mike Actually AVG has a resident shield that does monitor all traffic Internet or otherwise. Even without the plug in it would work, theoretically anyway. According to info at the grisoft.com web, every time you access a file whether it on a disk or during a download "resident shield" is checking / monitoring / runs in the background. I don't know the advantages over the plug in, I am using both, I figured it TB web site had it available for download they did so for a reason. But as a newbie I have limited knowledge on the need /reasoning of it. All I know is it works for me. -- Regards, Lynna mailto:[EMAIL PROTECTED] Using The Bat! v1.60c on Windows XP 5.1 Build 2600 Current Ver: 1.60c FAQ: http://faq.thebat.dutaint.com Unsubscribe: mailto:[EMAIL PROTECTED] Archives : http://tbudl.thebat.dutaint.com Moderators : mailto:[EMAIL PROTECTED] TBTech List: mailto:[EMAIL PROTECTED]
AV Plug-ins vs. Not
Folks, I've seen the discussions concerning anti-virus plug-ins, and I'm wondering what advantage that has over a program that monitors all incoming traffic. Mike smime.p7s Description: S/MIME Cryptographic Signature
