[Declude.Virus] dropping virus report e-mails

2004-03-25 Thread Bonno Bloksma
Hi, I also asked this question in the IMail forum but. could I maybe do something with the BANNAME keyword without sending the standard reply which I do want to send for regular files I ban on extention? As far as I know I have little flexibility (yet) in the the name of the *.eml file which

Re: [Declude.Virus] Trend and McAfee installed on same machine

2004-03-25 Thread R. Scott Perry
One option (with Declude Virus Pro) is to ban file extensions within .ZIP files (blocking all .EXE, .PIF, .SCR, .BAT, .COM, etc. files). The other option would be to rename the .ZIP file to use another extension. So if I understand correctly, I should be able to send a zip file to somebody

Re: [Declude.Virus] dropping virus report e-mails

2004-03-25 Thread R. Scott Perry
I also asked this question in the IMail forum but. could I maybe do something with the BANNAME keyword without sending the standard reply which I do want to send for regular files I ban on extention? As far as I know I have little flexibility (yet) in the the name of the *.eml file which

Re: [Declude.Virus] Request for per-domain configuration

2004-03-25 Thread Darin Cox
Hmmm...I hate having to turn off the footer for everyone just because of one customers. Haven't run into it yet myself, but some people on this list will probably run into the problem with having to pass encrypted zips for one customer while banning them for everyone else...or similar requests

RE: [Declude.Virus] Trend and McAfee installed on same machine

2004-03-25 Thread Kami Razvan
Scott: Just an idea... What if you extend the idea of Whitelist password to Declude Virus- for password protected zip files. If the subject has a code then the attachment with password protected will be skipped. If you can take the subject and delete the password before passing it on it can

[Declude.Virus] F-prot passing Netsky.P or variant?

2004-03-25 Thread Darin Cox
Anyone else having trouble with a lot of new viruses slipping through? I submitted two to F-Prot earlier this morning, but they are claiming that the attachments were Netsky.P. However, I have the latest virus defs from them and the virus logs clearly show them being scanned and virus

RE: [Declude.Virus] F-prot passing Netsky.P or variant?

2004-03-25 Thread Rodney Bertsch
Darin, Sounds exactly like what we had happen yesterday but the mail logs made it look like there was no attachment in the e-mail. Yet Norton caught an attachmentas Netsky.P. Something strange - Rodney -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL

RE: [Declude.Virus] Netsky returns with auto-response

2004-03-25 Thread Rodney Bertsch
Now that Darin has posted something similar I have to ask... If Norton caught something that wasn't actually there, then what is the 28.8 kb file it put in quarantine? Could the virus have come through as text which didn't show as an attachment? Thanks, Rodney -Original Message-

RE: [Declude.Virus] F-prot passing Netsky.P or variant?

2004-03-25 Thread Grant Griffith - Declude Virus
I had one slip thru to me this morning also... McAfee detected it on my system as the W32/Netsky.b.eml!zip virus. Not sure as to where it quarantined the file too, but I was surprised my banext's did not catch it also. Sincerely,Grant Griffith, Vice PresidentEI8HT LEGS Web Management Co.,

RE: [Declude.Virus] F-prot passing Netsky.P or variant?

2004-03-25 Thread R. Scott Perry
I had one slip thru to me this morning also... McAfee detected it on my system as the W32/Netsky.b.eml!zip virus. Not sure as to where it quarantined the file too, but I was surprised my banext's did not catch it also. The .eml is now being used for E-mails where no virus is detected, but

[Declude.Virus] Suggestion, Whitelist password in subject

2004-03-25 Thread Greg Little
This might be a way to block virus traffic, but allow employees and selected customers to send and receive EZip files. For example, when a virus sample is sent to McAfee's AVERT, they want a zip encrypted with infected. Currently I expect that since I'm blocking EZips, I could not send a sample