Re: [Declude.Virus] BANnotify.eml

2004-05-25 Thread Matt
bannotify.eml is the only template used for banned extensions or banned file names.  You can customize this file to be sent to anyone that you wish.  Note that this will only get sent if a banned extension or banned file name is detected AND Declude virus doesn't detect a vunerability or your v

[Declude.Virus] BANnotify.eml

2004-05-25 Thread Goran Jovanovic
Hi,   The documentation shows that the bannotify.eml file send mail back to %MAILFROM%. Can I just modify this to send mail to %ALLRECIPS% instead or is there another .eml file that I should be using to inform the recipient that a banned attachment was dropped?   Thanx      Gor

RE: [Declude.Virus] Agobot forging variant

2004-05-25 Thread Goran Jovanovic
OK that is fine I just thought it was a new command that I had not seen anywhere and went looking for it. :) Goran Jovanovic The LAN Shoppe > -Original Message- > From: [EMAIL PROTECTED] [mailto:Declude.Virus- > [EMAIL PROTECTED] On Behalf Of John Tolmachoff (Lists) > S

RE: [Declude.Virus] Good list of SKIPIFVIRUSNAMEHAS

2004-05-25 Thread Goran Jovanovic
This is good. I like it. Thanx Goran Jovanovic The LAN Shoppe > -Original Message- > From: [EMAIL PROTECTED] [mailto:Declude.Virus- > [EMAIL PROTECTED] On Behalf Of John Tolmachoff (Lists) > Sent: Tuesday, May 25, 2004 9:57 PM > To: [EMAIL PROTECTED] > Subject: RE: [Declud

RE: [Declude.Virus] Good list of SKIPIFVIRUSNAMEHAS

2004-05-25 Thread John Tolmachoff \(Lists\)
> Create a recip-vulnerability.eml with the "ONLYSENDIFVIRUSNAMEHAS > Vulnerability" command in it and customize the text to talk about > Vulnerabilities. Do I have to change anything in virus.cfg? > > Also still have the recip.eml file with a bunch of SKIPIFVIRUSNAMEHAS > Klez/Vulneravility/etc a

RE: [Declude.Virus] Agobot forging variant

2004-05-25 Thread John Tolmachoff \(Lists\)
> Ahh John I thought the command is "SKIPIFVIRUSNAMEHAS Agobot" in the > .eml file? Or is DONOTSENDIFVIRUSNAMEHAS a filter of some sort? Ah, what is in a name? That is what I get for trying to go off memory at the same time as doing 5 other things. John Tolmachoff Engineer/Consultant/Owner eServi

RE: [Declude.Virus] Agobot forging variant

2004-05-25 Thread Goran Jovanovic
> > [EMAIL PROTECTED] > > [EMAIL PROTECTED] > > [EMAIL PROTECTED] > > [EMAIL PROTECTED] > > Thought so. I have added Agabot to the DONOTSENDIFVIRUSNAMEHAS list. > Ahh John I thought the command is "SKIPIFVIRUSNAMEHAS Agobot" in the .eml file? Or is DONOTSENDIFVIRUSNAMEHAS a filter of some sort?

RE: [Declude.Virus] Good list of SKIPIFVIRUSNAMEHAS

2004-05-25 Thread Goran Jovanovic
> Ah, that makes sense. In that case, you can copy the > \IMail\Declude\recip.eml file to \IMail\Declude\recip-vulnerability.eml > (or > whatever name you want), and use a line "ONLYSENDIFVIRUSNAMEHAS > Vulnerability" (without any SKIPIFVIRUSNAMEHAS or SKIPIFFORGING lines). > OK that is great. N

RE: [Declude.Virus] Good list of SKIPIFVIRUSNAMEHAS

2004-05-25 Thread R. Scott Perry
> >Can I still send out notifications for the Vulnerability? > > It would be possible, but strongly discouraged, as you'll end up becoming > a spammer by doing so. The only notifications that I would be sending out would be to the recipient and not to the sender or the postmaster of the sending do

RE: [Declude.Virus] Good list of SKIPIFVIRUSNAMEHAS

2004-05-25 Thread Goran Jovanovic
> Actually, those should be sender.eml and otherpostmaster.eml (Declude > doesn't use any .txt files). Yes I was just quoting the web site since I could not look at the eml files online :) > > >Can I still send out notifications for the Vulnerability? > > It would be possible, but strongl

RE: [Declude.Virus] Good list of SKIPIFVIRUSNAMEHAS

2004-05-25 Thread R. Scott Perry
> The sample .eml files in the manual have the ones that we are aware of, so > there is no need to swap lists with others. The sample files that have the SKIPIFVIRUSNAMEHAS statements are sender.txt and otherpostmaster.txt. They both have the same list. I assume that I can use this list for the re

RE: [Declude.Virus] Good list of SKIPIFVIRUSNAMEHAS

2004-05-25 Thread Goran Jovanovic
> > The sample .eml files in the manual have the ones that we are aware of, so > there is no need to swap lists with others. > The sample files that have the SKIPIFVIRUSNAMEHAS statements are sender.txt and otherpostmaster.txt. They both have the same list. I assume that I can use this list fo

Re: [Declude.Virus] Good list of SKIPIFVIRUSNAMEHAS

2004-05-25 Thread R. Scott Perry
Does anyone have a good list of Virus names to put into the recip.eml file so that I do not notify the recipient that there was a virus. I am using F-Prot if it makes any difference. The sample .eml files in the manual have the ones that we are aware of, so there is no need to swap lists with o