[Declude.Virus] banext issue

2002-08-09 Thread Bob McGregor
I recently added multiple banext commands to my config file. I send a message to sender and postmaster when the message is banned. This morning I had a postmaster message and the message listed no banned extension. so, I looked at the message in the virus folder and there were 4 attachments

Re: [Declude.Virus] banext issue

2002-08-09 Thread Bob McGregor
The catch here is that BinHex (Mac encoding) files have the filename within the encoded segment. So you can have a situation where the MIME filename is safefile.txt, but the BinHex segment says the filename is evilvirus.exe (which you won't see, because it is encoded).

Re: [Declude.Virus] banext issue

2002-08-09 Thread R. Scott Perry
Those headers won't affect whether or not Declude bans the files -- the *real* filename is one you won't see, becaues it is encoded. You can send a copy of the E-mail file to [EMAIL PROTECTED] , and I can test it here to see what the real extensions are.

Re: [Declude.Virus] banext issue

2002-08-09 Thread Bob McGregor
ok, so next question... if declude caught the attachment why did it not list with the %BANEXT% variable? That variable was blank. How would I determine what file extension was caught. I'm just trying to understand... On Friday, August 9, 2002 9:17 AM, R. Scott Perry [EMAIL PROTECTED] wrote:

RE: [Declude.Virus] banext issue

2002-08-09 Thread John Tolmachoff
]] On Behalf Of R. Scott Perry Sent: Friday, August 09, 2002 8:18 AM To: [EMAIL PROTECTED] Subject: Re: [Declude.Virus] banext issue Those headers won't affect whether or not Declude bans the files -- the *real* filename is one you won't see, becaues it is encoded. You can send a copy of the E-mail

Re: [Declude.Virus] banext issue

2002-08-09 Thread Bob McGregor
Perry Sent: Friday, August 09, 2002 8:18 AM To: [EMAIL PROTECTED] Subject: Re: [Declude.Virus] banext issue Those headers won't affect whether or not Declude bans the files -- the *real* filename is one you won't see, becaues it is encoded. You can send a copy of the E-mail file to [EMAIL PROTECTED

Re: [Declude.Virus] banext issue

2002-08-09 Thread R. Scott Perry
I did not catch that you wanted the message How do I go about taking something from the virus folder, change the recipient to [EMAIL PROTECTED]? just copy and change the sender in both files? Probably the easiest thing to do would be to send the .SMD file (from the virus folder) as an

Re: [Declude.Virus] banext issue

2002-08-09 Thread Bob McGregor
ok scott, I'll get the latest thanks for looking into it. Insidently, I see that all the time with mac files... spaces at the end pain in the _ss On Friday, August 9, 2002 11:18 AM, R. Scott Perry [EMAIL PROTECTED] wrote: so, I looked at the message in the virus folder and there were