[Declude.Virus] banext issue

2002-08-09 Thread Bob McGregor
I recently added multiple banext commands to my config file. I send a message to sender and postmaster when the message is banned. This morning I had a postmaster message and the message listed no banned extension. so, I looked at the message in the virus folder and there were 4 attachments

Re: [Declude.Virus] banext issue

2002-08-09 Thread Bob McGregor
The catch here is that BinHex (Mac encoding) files have the filename within the encoded segment. So you can have a situation where the MIME filename is safefile.txt, but the BinHex segment says the filename is evilvirus.exe (which you won't see, because it is encoded).

Re: [Declude.Virus] banext issue

2002-08-09 Thread R. Scott Perry
Those headers won't affect whether or not Declude bans the files -- the *real* filename is one you won't see, becaues it is encoded. You can send a copy of the E-mail file to [EMAIL PROTECTED] , and I can test it here to see what the real extensions are.

Re: [Declude.Virus] banext issue

2002-08-09 Thread Bob McGregor
ok, so next question... if declude caught the attachment why did it not list with the %BANEXT% variable? That variable was blank. How would I determine what file extension was caught. I'm just trying to understand... On Friday, August 9, 2002 9:17 AM, R. Scott Perry [EMAIL PROTECTED] wrote:

RE: [Declude.Virus] banext issue

2002-08-09 Thread John Tolmachoff
Scott, please post, (although I know you will) what your findings are as we also have clients with MAC users. John Tolmachoff IT Manager, Network Engineer RelianceSoft, Inc. Fullerton, CA 92835 www.reliancesoft.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]

Re: [Declude.Virus] banext issue

2002-08-09 Thread Bob McGregor
I did not catch that you wanted the message How do I go about taking something from the virus folder, change the recipient to [EMAIL PROTECTED]? just copy and change the sender in both files? On Friday, August 9, 2002 9:54 AM, John Tolmachoff [EMAIL PROTECTED] wrote: Scott, please post,

Re: [Declude.Virus] banext issue

2002-08-09 Thread R. Scott Perry
I did not catch that you wanted the message How do I go about taking something from the virus folder, change the recipient to [EMAIL PROTECTED]? just copy and change the sender in both files? Probably the easiest thing to do would be to send the .SMD file (from the virus folder) as an

Re: [Declude.Virus] banext issue

2002-08-09 Thread Bob McGregor
ok scott, I'll get the latest thanks for looking into it. Insidently, I see that all the time with mac files... spaces at the end pain in the _ss On Friday, August 9, 2002 11:18 AM, R. Scott Perry [EMAIL PROTECTED] wrote: so, I looked at the message in the virus folder and there were