[Declude.Virus] Vulnerabilities explained

2003-03-05 Thread Markus Gufler
Hi Scott, Is there a information page where you explain the different vulnerabilities and what are tipical causes of this? We have here a lot of hold messages with: Outlook 'Blank Folding' Vulnerability Outlook 'CR' Vulnerability Outlook 'Boundary Space Gap' Vulnerability

[Declude.Virus] Allrecips ... Singlerecip?

2003-03-05 Thread Markus Gufler
Hi Scott, Is there a certain reason why there is no variable containing the single recipient of the message? I've created a ASP-Script to requeue a spoolfile hold by an vulnerability. Now there is the following problem: A send a message with a vulnerability to B and C B is a user on our server,

Re: [Declude.Virus] Allrecips ... Singlerecip?

2003-03-05 Thread R. Scott Perry
Is there a certain reason why there is no variable containing the single recipient of the message? Yes -- because there is no single recipient (unless there is only a single recipient, in which case %ALLRECIPS% will display that recipient). :) Is there no variable containing the SMTP-Recipient

RE: [Declude.Virus] Allrecips ... Singlerecip?

2003-03-05 Thread Markus Gufler
The problem is that while there is always only a single sender, there are often multiple recipients. So for the E-mail with a vulnerability sent to B and C, and there was a variable to produce a single recipient, would you want it to be B or C? Therein lies the problem. From where

RE: [Declude.Virus] Allrecips ... Singlerecip?

2003-03-05 Thread R. Scott Perry
From where JM gathers the X-RCPT-TO value? That is added by IMail, when the E-mail is being delivered. At that point, IMail has the single E-mail with multiple recipients, and it goes through each recipient and stores a copy of the E-mail in their mailbox. Since it has access to the

RE: [Declude.Virus] Allrecips ... Singlerecip?

2003-03-05 Thread Markus Gufler
That is added by IMail, when the E-mail is being delivered. At that point, IMail has the single E-mail with multiple recipients, and it goes through each recipient and stores a copy of the E-mail in their mailbox. Since it has access to the individual mailbox at that time, it is

RE: [Declude.Virus] Allrecips ... Singlerecip?

2003-03-05 Thread R. Scott Perry
Is there a way to add a new SKIPIFMULTIPLERECIPS criteria? So we can send vulnerability warnings at least to single recipients. Perhaps, but: I mean sending the warning back to the sender so that he can force sending is not a good solution. %ALLRECIPS% will only include the sender if the sender

RE: [Declude.Virus] Allrecips ... Singlerecip?

2003-03-05 Thread Markus Gufler
%ALLRECIPS% will only include the sender if the sender sent a copy to himself, through your mailserver. If you are not running an open relay, that means that the %ALLRECIPS% notification would only go to the sender if the sender was a user of yours. I intended to send the warning to

RE: [Declude.Virus] Allrecips ... Singlerecip?

2003-03-05 Thread R. Scott Perry
%ALLRECIPS% will only include the sender if the sender sent a copy to himself, through your mailserver. If you are not running an open relay, that means that the %ALLRECIPS% notification would only go to the sender if the sender was a user of yours. I intended to send the warning to

RE: [Declude.Virus] Allrecips ... Singlerecip?

2003-03-05 Thread Markus Gufler
I'm guessing you would want the link to go to the recipient, rather than the sender (since the sender will obviously want the E-mail to go through if he intended for the vulnerability to be there). Yes. Exactly what I've said 2 mails before. (Probably my english is not good enough :-)

[Declude.Virus] Virus notification to IT department

2003-03-05 Thread Harry Vanderzand
A client of ours is asking if it is possible to send a notification to [EMAIL PROTECTED] as well as a notification to the user. Is it possible to do this for just one domain while leaving the others as is? Thank you Harry Vanderzand inTown Internet Computer Services 11 Belmont Ave. W.

Re: [Declude.Virus] Virus notification to IT department

2003-03-05 Thread R. Scott Perry
A client of ours is asking if it is possible to send a notification to [EMAIL PROTECTED] as well as a notification to the user. Is it possible to do this for just one domain while leaving the others as is? Unfortunately, I can't think of any way to accomplish that for just one domain.

RE: [Declude.Virus] Vulnerabilities explained

2003-03-05 Thread Adolfo Justiniano
Hello Markus, Thank you for your contribution. I'm releasing the hold messages using a program alias in IMail, so the recipients could just send an email to the alias address to unblock the email. Following is the little cmd script, as you can see it uses some of the GNU tools for Win32 that you