Re: [Declude.Virus] Swen not tagged as forging?

2004-03-08 Thread R. Scott Perry
I'm not seeing both a "From" and a "Mail from" listed in the headers that come back from Declude. So, it must be in some detail that not in %headers%. I take it that Declude will send it to the "Mail from". Looks like I'll be testing with Swen Not forging. You'll see the return address in the

Re: [Declude.Virus] Swen not tagged as forging?

2004-03-08 Thread Greg Little
I'm not seeing both a "From" and a "Mail from" listed in the headers that come back from Declude. So, it must be in some detail that not in %headers%. I take it that Declude will send it to the "Mail from". Looks like I'll be testing with Swen Not forging. Greg Little Declude Virus Ver. 1.78

Re: [Declude.Virus] Swen not tagged as forging?

2004-03-08 Thread Matt
Just to clarify. Swen forges the From address, but not the Mail From address. I'm reevaluating my choice to only send recipient notices. I may just change to sender notifications only with SKIPIFFORGING. Matt R. Scott Perry wrote: Yes, Swen forges. FWIW, we haven't yet seen a single co

Re: [Declude.Virus] Swen not tagged as forging?

2004-03-08 Thread R. Scott Perry
Yes, Swen forges. FWIW, we haven't yet seen a single copy of Swen that forges. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Catches known viruses and is the leader in mailserver v

Re: [Declude.Virus] Swen not tagged as forging?

2004-03-08 Thread Greg Little
Yes, Swen forges. I don't send any auto-notice to sender or recipient on forging viruses. You don't know who the "real" sender is and it does nothing useful for the recipient to hear "an unknown PC Sent you a virus, but it was blocked by the server". For most of the Macro viruses (and some of

CBL:Re: [Declude.Virus] Swen not tagged as forging?

2004-03-08 Thread Matt
ndeed infected.   John Tolmachoff Engineer/Consultant/Owner eServices For You   -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Matt Sent: Sunday, March 07, 2004 6:27 PM To: [EMAIL PROTECTED] Subject: [Declude.Virus] Swen not tagg

RE: [Declude.Virus] Swen not tagged as forging?

2004-03-08 Thread John Tolmachoff \(Lists\)
: Sunday, March 07, 2004 6:27 PM To: [EMAIL PROTECTED] Subject: [Declude.Virus] Swen not tagged as forging?   I just had a client ask me to turn off all virus notifications, and the message that they sent back was for Swen.A.    Date: 03/07/2004 17:37:53   Subject: Abort Notice   Host

[Declude.Virus] Swen not tagged as forging?

2004-03-07 Thread Matt
I just had a client ask me to turn off all virus notifications, and the message that they sent back was for Swen.A. Date: 03/07/2004 17:37:53 Subject: Abort Notice Host: cybermatsa.com.mx [148.233.93.6] Attachment: enqofe.exe Virus: W32/[EMAIL PROTECTED] Is it possible that this isn't in