[Declude.Virus] [Forged]@...

2003-03-17 Thread Hirthe, Alexander
Hello,

I'm getting mails Invalid final delivery userid: [EMAIL PROTECTED]

in my virus.cfg I have 

# The FORGINGVIRUS option is used to list viruses that forge the return
address, so Declude
# can replace the name of the sender with [Forged].
#
FORGINGVIRUSKlez
FORGINGVIRUSSobig


Declude is running in v1.65, F-Prot, IMail 7.13, NT Server.

Has anyone else this problem? 
I thought Declude will report this only to the postmaster and the receiver,
and not to the sender?? ;-)

Alex 
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.


Re: [Declude.Virus] [Forged]@...

2003-03-17 Thread R. Scott Perry

I thought Declude will report this only to the postmaster and the receiver,
and not to the sender?? ;-)
To prevent the notifications from getting sent to the sender of viruses 
such as Klez (where the return address is forged), you would also need to 
have the following lines at the top of the \IMail\Declude\sender.eml file:

SKIPIFVIRUSNAMEHAS Klez
SKIPIFVIRUSNAMEHAS Sobig
Those lines instruct Declude Virus not to send the .eml file, when certain 
viruses are detected.
 -Scott

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.