RE: [Declude.Virus] DELETEVIRUSES Not working.

2004-10-20 Thread Tim Collins \(Home\)
So why put them in the virus folder? There is no way (that I know of) to requeue these messages? ... Or fix the vulnerability... True? What is Horizon's best practices theory on how to deal with messages that land in the virus folder? -Original Message- From: [EMAIL PROTECTED]

RE: [Declude.Virus] DELETEVIRUSES Not working.

2004-10-20 Thread R. Scott Perry
So why put them in the virus folder? There is no way (that I know of) to requeue these messages? Requeueing them is easy; copy the D*.SMD file and matching Q*.SMD file from the \IMail\spool\virus directory to the \IMail\spool directory. ... Or fix the vulnerability... You probably could do

RE: [Declude.Virus] DELETEVIRUSES Not working.

2004-10-20 Thread John Carter
Is there any chance of getting a DELETEVULNERABILITIES or a separate directory for them? John -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry Sent: Tuesday, October 19, 2004 6:29 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.Virus]

Re: [Declude.Virus] DELETEVIRUSES Not working.

2004-10-20 Thread Nick
On 19 Oct 2004 at 19:29, R. Scott Perry wrote: Can 'by design' mean a switch be addeded to allow deletion? I would like to be able to make that decision - not declude. Thanks -Nick It seems that DELETEVIRUSES ON isn't working in Declude Virus 1.81 I have it set to: DELETEVIRUSES ON

Re: [Declude.Virus] DELETEVIRUSES Not working.

2004-10-20 Thread Darin Cox
If you're looking for what others have done as well... we delete viruses, for banned files notify the recipient with a link in the notification to a web script that will requeue the file if they want to receive it, and review vulnerabilities, deleting or requeueing as needed. Darin. -

[Declude.Virus] Banned ZIP with .exe extension

2004-10-20 Thread Chris Patterson
I am having files blocked since upgrading to 8.1 with this log: Q59b21fa60030b5ea Banning .ZIP file with EXE extension. Is this a self-extracting Zip or zipped .exe? This was a firmware upgrade from Linksys. Thanks, Chris Patterson, CCNA Network Engineer --- [This E-mail was scanned for

Re: [Declude.Virus] Banned ZIP with .exe extension

2004-10-20 Thread Rick Davidson
Its likely a self extracting zip archive, winzip allows you to create exe zip archives Rick Davidson National Systems Manager North American Title Group 440-953-9346 - Office 440-953-0925 - Fax 440-487-7344 - Mobile [EMAIL PROTECTED] - - Original Message - From: Chris Patterson [EMAIL

RE: [Declude.Virus] DELETEVIRUSES Not working.

2004-10-20 Thread Brad Morgan
Can 'by design' mean a switch be addeded to allow deletion? I would like to be able to make that decision - not declude. Thanks -Nick It seems that DELETEVIRUSES ON isn't working in Declude Virus 1.81 I have it set to: DELETEVIRUSES ON In my virus.cfg but they're

RE: [Declude.Virus] Banned ZIP with .exe extension

2004-10-20 Thread Chris Patterson
Does anyone know if there is a way to allow these through and still block .exe's? Thanks, Chris Patterson, CCNA Network Engineer Rapid Systems -Original Message- From: Rick Davidson [mailto:[EMAIL PROTECTED] Sent: Wednesday, October 20, 2004 11:12 AM To: [EMAIL PROTECTED] Subject:

Re: [Declude.Virus] Banned ZIP with .exe extension

2004-10-20 Thread R. Scott Perry
I am having files blocked since upgrading to 8.1 with this log: Q59b21fa60030b5ea Banning .ZIP file with EXE extension. Is this a self-extracting Zip or zipped .exe? This was a firmware upgrade from Linksys. That's a .ZIP file with an .EXE file in it. If you use BANZIPEXTS ON (which says to ban

Re: [Declude.Virus] New ZIP exploit confuses some AV products

2004-10-20 Thread Greg Little
Some (Most?) of the AV vendors have patches already. Looks like it was quietly announce to the AV vendors about 2 to 3 weeks ago. This mostly impacts e-mail scanning. It's worth the effort to check, if you have one of these vendors. (Some require upgraded software). This vulnerability affects

Re: [Declude.Virus] Banned ZIP with .exe extension

2004-10-20 Thread Matt
"Another" good reason? IMO, that's overstepping a bit. There's no way that I could block zip files for my clients and maintain their business. The bulletin also indicated that AV vendors had either already updated their products or would do so soon. Declude also has some protections for zip