[Declude.Virus] Possibly New Virus?

2004-04-29 Thread Jeff Maze - Hostmaster
Hello, Just wanted to write to let ya'll know about a message that I received today (Scott, I've forwarded the original message to the virustrap e-mail account for review). Maybe someone has already seen this, but this is a first for me. Neither F-Prot on the server nor Norton Anti-virus

RE: [Declude.Virus] Possibly New Virus?

2004-04-29 Thread Jeff Maze - Hostmaster
Ok.. Thanks.. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry Sent: Thursday, April 29, 2004 10:24 AM To: [EMAIL PROTECTED] Subject: Re: [Declude.Virus] Possibly New Virus? Just wanted to write to let ya'll know about a message

[Declude.Virus] [OT} Anti-Virus - Client Side Suggestion

2004-04-25 Thread Jeff Maze - Hostmaster
McAfee, Norton, or others? Which do you think provides the quickest updates and the best support.. Just was curious.. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an

[Declude.Virus] W32.Netsky.Q got through..

2004-04-23 Thread Jeff Maze - Hostmaster
Hello, This morning when receiving message from our spam account (I hold everything instead of deleting then review), I received a message and attachment that Norton AV on my local machine caught as a Netsky.Q virus. This would have been delivered to the client had it not failed the spam

RE: [Declude.Virus] W32.Netsky.Q got through..

2004-04-23 Thread Jeff Maze - Hostmaster
Hello, Yes, so far this is the only copy that has come through. I haven't heard from any of my clients of them saying the virus has come through. I didn't even think about EZIP. That didn't catch it either when it should have, correct? I'll have to see if I can restore the

RE: [Declude.Virus] W32.Netsky.Q got through..

2004-04-23 Thread Jeff Maze - Hostmaster
Ok.. If I can get it unquarentined and sent to ya I will.. Sending may be a problem as well with NAV (which can be disabled) and F-PROT on the server.. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry Sent: Friday, April 23, 2004 10:17 AM

RE: [Declude.Virus] W32.Netsky.Q got through..

2004-04-23 Thread Jeff Maze - Hostmaster
I attempted to resend the virus again and it bounced (Unknown user: [EMAIL PROTECTED]). Just wanted to reconfirm the virus e-mail address. Is it [EMAIL PROTECTED] -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry Sent: Friday, April 23,

RE: [Declude.Virus] W32.Netsky.Q got through..

2004-04-23 Thread Jeff Maze - Hostmaster
Ok.. The latest time I tried to send (at 1300) went through.. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jeff Maze - Hostmaster Sent: Friday, April 23, 2004 12:56 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.Virus] W32.Netsky.Q got through.. Ok

RE: [Declude.Virus] W32.Netsky.Q got through..

2004-04-23 Thread Jeff Maze - Hostmaster
Hello, I forwarded that virus onto you [EMAIL PROTECTED] It came from my main work e-mail [EMAIL PROTECTED] - instead of this account. But just looking at the mail logs, I don't know if it went through or not. Here's our logs: 04:23 11:33 SMTP-(0508) MAIL FROM:[EMAIL

RE: [Declude.Virus] W32.Netsky.Q got through..

2004-04-23 Thread Jeff Maze - Hostmaster
PLEASE DISREGARD ..Message was stuck in queue.. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jeff Maze - Hostmaster Sent: Friday, April 23, 2004 11:37 AM To: [EMAIL PROTECTED] Subject: RE: [Declude.Virus] W32.Netsky.Q got through.. Hello, I

RE: [Declude.Virus] W32.Netsky.Q got through..

2004-04-23 Thread Jeff Maze - Hostmaster
I was able to send the virus to that account (at 1300).. I checked our logs and it went through and got a response e-mail.. The message below got caught up in queue.. Was messing with our DNS servers trying to fix the timeout problems we've been having lately.. -Original Message- From:

[Declude.Virus] Proactive Response - Maybe already in Pro version

2004-03-30 Thread Jeff Maze - Hostmaster
Hello, I was just wondering something. Like most people on the list, I told Declude to block EZIP files. I just got a call from a client that said that his messages couldn't be sent out because it was an EZIP file (password protected zip file; payroll). I told him of the server

[Declude.Virus] Declude Object Vulnerability

2004-03-22 Thread Jeff Maze - Hostmaster
Hello, Was wondering if there is anyway to test and make sure Declude is catching this? Thanks.. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to

RE: [Declude.Virus] OBJECT CODE vulnerability - Notifications

2004-03-19 Thread Jeff Maze - Hostmaster
Great.. Thanks.. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry Sent: Friday, March 19, 2004 4:13 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.Virus] OBJECT CODE vulnerability - Notifications I was wondering what if any

RE: [Declude.Virus] New Virus - MiMail.C - spreading fast

2003-10-31 Thread Jeff Maze - Hostmaster
wOOhOO! F-Prot is catching them now.. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can

RE: [Declude.Virus] Off Topic I think

2003-10-24 Thread Jeff Maze - Hostmaster
What's weird is that it also appears as though the same thing happened with the Half-Life 2 code. E-mail was acting strange and then a portion of the code was stolen. I wonder if it was a Microsoft product that this person (that working on the Half-Life 2 code) was using. -Original

RE: [Declude.Virus] Off Topic I think

2003-10-24 Thread Jeff Maze - Hostmaster
http://story.news.yahoo.com/news?tmpl=storycid=569ncid=738e=3u=/nm/20031 023/tc_nm/media_videogames_halflife2_dc --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to

RE: [Declude.Virus] MS Security Patch Emails

2003-10-02 Thread Jeff Maze - Hostmaster
Hmm, I'd just send out an e-mail stating that due to recent influx of virus's and virus's contained within EXE files, you're updating the mail server security policy. Then state that beginning %on this date% the following file extensions will be blocked: yadda-yadda-yadda. Most will be angry

RE: [Declude.Virus] Anyone else getting hit hard today with Sobig.F again?

2003-09-05 Thread Jeff Maze - Hostmaster
Time to find out which people it is and shut them down.. Disable web access and the account and watch them scramble.. hahaha -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of paul Sent: Friday, September 05, 2003 3:40 PM To: [EMAIL PROTECTED] Subject: Re:

RE: [Declude.Virus] Sobig, the next wave?

2003-08-27 Thread Jeff Maze - Hostmaster
Hahaha.. I have a list of about 20+ computer IPs that we can start with.. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Webmaster Oilfield Directory Sent: Tuesday, August 26, 2003 9:54 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.Virus] Sobig, the

RE: [Declude.Virus] Sobig, the next wave?

2003-08-27 Thread Jeff Maze - Hostmaster
I don't think that's a dumb question 'cuz I would like to know that too.. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Sharyn Schmidt Sent: Wednesday, August 27, 2003 8:36 AM To: [EMAIL PROTECTED] Subject: RE: [Declude.Virus] Sobig, the next wave?

[Declude.Virus] Virus Log Analyzer..

2003-08-27 Thread Jeff Maze - Hostmaster
Hmmm.. I ran it and got these results: Virus Log Analyzer 1.2 Report Date: 8/27/2003 10:48:57 AM Source Files: *** vir0820.log * Scan Summary

RE: [Declude.Virus] Sobig- The Morning After

2003-08-23 Thread Jeff Maze - Hostmaster
Wow.. That's great.. What port was the machine trying to use? And what IP was the machine trying to contact? Just curious.. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Doug McKee Sent: Saturday, August 23, 2003 10:27 AM To: [EMAIL PROTECTED]

[Declude.Virus] Sobig.F [OT]

2003-08-19 Thread Jeff Maze - Hostmaster
By the looks of things, this virus is going to be worse then the Klez. It's amazing the number of e-mail received. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail

RE: [Declude.Virus] Sobig.F [OT]

2003-08-19 Thread Jeff Maze - Hostmaster
] On Behalf Of Jeff Maze - Hostmaster Sent: Tuesday, August 19, 2003 3:25 PM To: [EMAIL PROTECTED] Subject: [Declude.Virus] Sobig.F [OT] By the looks of things, this virus is going to be worse then the Klez. It's amazing the number of e-mail received. --- [This E-mail was scanned for viruses by Declude

RE: [Declude.Virus] New interim release of Declude Virus to block Mimail's message.zip

2003-08-14 Thread Jeff Maze - Hostmaster
I assume its advisable to remove the BANNAME in the virus.cfg file now, eh? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry Sent: Tuesday, August 05, 2003 1:35 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.Virus] New interim release of

[Declude.Virus] OT: F-Prot status page

2003-06-12 Thread Jeff Maze - Hostmaster
Hello, I was wondering if anyone knows how to have F-Prot automatically close the status page when it's done looking for updates. I've noticed that when the page is left open, the updater won't go an look for new updates until it's closed. Once it's closed, all is well and it goes out

RE: [Declude.Virus] OT: F-Prot status page

2003-06-12 Thread Jeff Maze - Hostmaster
Thanks for the reply.. But, we're still able to get the updates.. It's just that with the update status page open, no updates are done.. Instant you close it, updater runs again (if it's missed the update) and checks for updates again.. Also, noticed that the full system scan will also not run

[Declude.Virus] [OT]: BugBear

2003-06-06 Thread Jeff Maze - Hostmaster
Anyone notice a rise in Bugbear lately? --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives

[Declude.Virus] OT - Anti-Virus Gateway

2003-03-12 Thread Jeff Maze - Hostmaster
Sorry for this being off topic, but have a question. Is there an anti-virus gateway that will check all traffic coming in and going out of a server for virus's, etc. We're developing a web site for a company that will be sending and receiving resumes and other files. The system will be sending

RE: [Declude.Virus] WHITELIST IP address

2003-02-14 Thread Jeff Maze - Hostmaster
So with IPBYPASS xxx.xxx.xxx.xxx in the Global.Cfg, it will tell Declude Junkmail that even though this IP is whitelisted, still run the spam tests on any message from it. Also, is there a Declude Junkmail list? I'm sorry if there is and I posted this on the Virus mailer.. -Original

[Declude.Virus] big@boss.com postmaster@boss.com

2003-02-05 Thread Jeff Maze - Hostmaster
Hello, It appears as though the Sobig virus is making it's rounds again. I've gotten three or four Undeliverable mails today. Anyway, I remember reading somewhere in this list (when the virus first hit) that there was a way for Declude to block these message before the server even

RE: [Declude.Virus] Changed name of server, now no SPAM filtering..

2003-02-04 Thread Jeff Maze - Hostmaster
Yeah, that's what Scott replied back saying.. Now, just waiting for the new key.. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Jonathan Sent: Tuesday, February 04, 2003 10:45 AM To: [EMAIL PROTECTED] Subject: Re: [Declude.Virus] Changed name of

[Declude.Virus] WHITELIST FROM *@home.com - wildcard

2003-01-24 Thread Jeff Maze - Hostmaster
Hello, I was wondering if it's possible to add a wildcard to the WHITELIST FROM entry. So say any mail coming from Adelphia.Net would be whitelisted (E.g. WHITELIST FROM *@adelphia.net). Thanks.. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

[Declude.Virus] RFC for Internet E-Mail Servers - DNS setup

2003-01-13 Thread Jeff Maze - Hostmaster
Hello, I was wondering if anyone knew what the RFC was for how the DNS should be configured (MX and Reverse DNS) for an internet e-mail server. It would be nice to quote from it when I e-mail the postmasters of legitimate servers which aren't configured correctly. Thanks..

[Declude.Virus] Whitelist single IP

2003-01-06 Thread Jeff Maze - Hostmaster
Hello, I was wondering how exactly I can whitelist a single IP address. I tried adding it to the conf file, but it not working. I'm running declude v1.65 --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus

RE: [Declude.Virus] Whitelist single IP

2003-01-06 Thread Jeff Maze - Hostmaster
PROTECTED] Subject: Re: [Declude.Virus] Whitelist single IP If I remember correctly on 1/6/03 8:54 AM Jeff Maze - Hostmaster wrote: I was wondering how exactly I can whitelist a single IP address. I tried adding it to the conf file, but it not working. I'm running declude v1.65 How did you add

[Declude.Virus] Interesting X-Header

2002-12-20 Thread Jeff Maze - Hostmaster
Was just curious what this meant. Have never seen this before. X-Spam-Tests-Failed: MONKEYFORMMAIL --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL

RE: [Declude.Virus] F-Prot Updater Question

2002-12-03 Thread Jeff Maze - Hostmaster
I'm not sure. I e-mail them yesterday to ask as well. Putting in a new firewall and want to make sure I configure it correctly so f-prot can get the updates. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Dan Star Sent: Tuesday, December 03, 2002