Hi Mike,
Monday, November 11, 2002, 5:13:14 PM, you wrote:
MN> Be aware that it uses a variety of subjects: I've seen 2 subject
MN> variations in addition to the possible above URLs owned by the creeps.
We're filtering on the subject line:
"you have an E-Card from"
What other subject lin
- Original Message -
From: "Dan Star" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Monday, November 11, 2002 9:21 AM
Subject: Re: [Declude.Virus] E-card email
> What rule are you using since it can come from any address and many email
may have
> 'Greetings!' in the subject box?
>w
as far as i can see, it's redirected to here..
https://www.accountonline.com/AC/index.jsp that's all i get...
- Original Message -
From: "Dustin Freeman" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Monday, November 11, 2002 10:17 AM
Subject: [Declude.Virus] OT Cannot find
Is it possible to just copy the unzipped virus definition files to the fprot
directory, instead of using the windows update program? I have a very old
computer I installed fprot on, and it will not use the windows update
program. I think the Internet Explorer program is too old, and all I want is
Is it possible to just copy the unzipped virus definition files to the fprot
directory, instead of using the windows update program? I have a very old
computer I installed fprot on, and it will not use the windows update
program. I think the Internet Explorer program is too old, and all I want is
t
Can someone checkout something. I cannot bring up www.universalcard.com on
a dialup connection, but I can bring it up on through our network
connection,(different systems same DNS)
A trace dies @ 206.24.226.22 arr2-loopback, pings timeout on both
connections.
Is there something down on the Cabl&W
> That is not a variable.
>
> Some of the messages had that as part of the address.
>
> Again, that is without the spaces. (Which are there in this posting so it
> does not get caught by everyone's filters and rules.)
Thank You John,
-Patrick
---
[This E-mail scanned for viruses by Declude/McAfe
>Please excuse my ignorance, but what does the backslash variable do to the
filter?
That is not a variable.
Some of the messages had that as part of the address.
Again, that is without the spaces. (Which are there in this posting so it
does not get caught by everyone's filters and rules.)
John
John,
Please excuse my ignorance, but what does the backslash variable do to the
filter?
-Patrick
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:Declude.Virus-owner@;declude.com]On Behalf Of John Tolmachoff
> Sent: Monday, November 11, 2002 12:54 PM
> To: [EMAIL PROTECTED]
> Subj
> Why bother if you are adding a weight of "0"?
>
> Bill
I'm bouncing the message...
-Patrick
---
[This E-mail scanned for viruses by Declude/McAfee]
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.Virus mailing list. To
Why bother if you are adding a weight of "0"?
Bill
-Original Message-
From: Patrick Childers [mailto:pchilders@;hgbd.com]
Sent: Monday, November 11, 2002 9:33 AM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.Virus] E-card email
> I tried your "body" test and it did NOT catch that email!
I think you also need to include:
f r i e n d g r e e t i n g s \ . c o m
f r i e n d - g r e e t i n g s \ . c o m
Again, without the spaces.
John Tolmachoff MCSE, CSSA
IT Manager, Network Engineer
RelianceSoft, Inc.
Fullerton, CA 92835
www.reliancesoft.com
---
[This E-mail was scanned for
> I tried your "body" test and it did NOT catch that email! May be it will
> catch the redistribution mails that are sent after a machine has
> caught the
> worm.
>
> Best Regards
> Andy Schmidt
I filtered on F r i e n d - g r e e t i n g s . c o m (without the spaces)
because of the copy of this
>Never mind, it's been a bad morning here Never type until you're
entirely awake.
Been there done that.
:))
John Tolmachoff MCSE, CSSA
IT Manager, Network Engineer
RelianceSoft, Inc.
Fullerton, CA 92835
www.reliancesoft.com
---
[This E-mail was scanned for viruses by Declude Virus (http
Hi;.. Sure here it is
We have a Wordfilter file as a custom filter. We reroute all messages
with a weight of 20 to the Admin for review.
The GLOBAL.cfg entry for the word filter is:
WORDFILTER filter d:\IMail\Declude\WordFilter.txt
x 0 0
We assigned a weight of 0 sinc
Hi,
actually - I just sent myself the card - and here is how Declude REJECTED it
(based on weigthing of 14)
11/11/2002 11:06:48 Qd58c207000a623f4 OSSRC:6 REVDNS:5 HELOBOGUS:3 . Total
weight = 14
11/11/2002 11:06:48 Qd58c207000a623f4 Msg failed OSSRC ([1] FreeYankee, see
http://spews.org/ask.cgi?
global.cfg
---
frndgrt filter d:\imail\declude\frndgrt.txt x 0 0
$default$.junkmail
-
frndgrt BOUNCE
frndgrt.txt
-
BODY0 CONTAINSF r i e n d - G r e e t i n g s . c o m
(without the spaces)
Thanks! This is exact
>As to the "controversy" over whether a virus with a license is still a
>virus: Bridex/Braid smelt like a virus, felt like a virus and if you look
>at what it does (http://www.f-prot.com/virusinfo/bridex.html) is a virus.
Bridex/Braid has been known and admitted as a virus from the second it wa
18 matches
Mail list logo
