RE: [Declude.Virus] Virus bypassing newer MX records

2004-06-15 Thread Goran Jovanovic
Andy You ARE aware that there are well-documented situations where Imail can get messages past Declude - so they never show up in the Declude logs? This may be have been fixed in the latest Imail 8 fixes - but I don't know this for certain. Where would I find this documented? Goran

RE: [Declude.Virus] Virus bypassing newer MX records

2004-06-15 Thread Andy Schmidt
Title: Message Other than the firewall/router - doesn't their SMTP server application(e.g., like IIS) have the ability to restrict inbound connections to certain IP ranges. We hada similar issue with one of my relay customers - and we just defined IIS SMTP to only accept mail from my

Re: [Declude.Virus] Virus bypassing newer MX records

2004-06-15 Thread Matt
It does have this configuration, however I'm not sure about how secure that might be, or if it will still reject E-mail addressed locally (IMail does not for instance). I think that this might be appropriate as long as the server doesn't have roaming users that connect with SMTP AUTH, or at

Re: [Declude.Virus] Virus bypassing newer MX records

2004-06-15 Thread Russ Uhte \(Lists\)
At 12:17 PM 6/15/2004, Matt wrote: This domain was recently moved to our DNS and I suspect that someone at their old DNS hosting provider is infected and using their old unremoved DNS entries and that is why they are bypassing us. Note though that some spammers are definitely caching old

RE: [Declude.Virus] Virus bypassing newer MX records

2004-06-15 Thread Andy Schmidt
Hi, The mail-archive for the Declude.JunkMail and/or Declude.Virus list had discussions for a while (several months ago), when Scott and various customers where trying to determine, why some emails would not appear in any Declude lists. It had been amplified by an early Imail 8 Version. But -

Re: [Declude.Virus] Virus bypassing newer MX records

2004-06-15 Thread Bill Landry
- Original Message - From: Russ Uhte (Lists) [EMAIL PROTECTED] At 12:17 PM 6/15/2004, Matt wrote: This domain was recently moved to our DNS and I suspect that someone at their old DNS hosting provider is infected and using their old unremoved DNS entries and that is why they are

[Declude.Virus] Virus notifications

2004-06-15 Thread David Fletcher
Hi all, I know I should have stayed on top of this all along, but we need to make some adjustments now. What is the current recommendation as far as virus notification setting goes? We need to make sure we aren't doing more harm than good in this arena. I know Matt had said he had some

Re: [Declude.Virus] Virus notifications

2004-06-15 Thread Russ Uhte \(Lists\)
At 01:23 PM 6/15/2004, David Fletcher wrote: Hi all, I know I should have stayed on top of this all along, but we need to make some adjustments now. What is the current recommendation as far as virus notification setting goes? We need to make sure we aren't doing more harm than good in this

[Declude.Virus] F-prot missing viruses - Revisited

2004-06-15 Thread Keith Purtell
My immediate manager has some previous experience using a gateway device to deal with viruses and other issues. He wants general information about putting something like that in front of our IMail server (which also hosts our public Web site), and he's specifically interested in the Symantec

RE: [Declude.Virus] Virus notifications

2004-06-15 Thread Harry Vanderzand
Ditto! I only send to myself so I have a sense of what is going on from a quick overview Harry Vanderzand inTown Internet Computer Services 11 Belmont Ave. W. Kitchener, ON N2M 1L2 519-741-1222 Did you know we offer: - Province wide dial-up and high speed internet access - Web accessible

Re: [Declude.Virus] F-prot missing viruses

2004-06-15 Thread R. Scott Perry
We've had two incidents where a virus got through our mail server, apparently during the time lag while F-Prot was writing/distributing a new virus definition. (We update every hour.) What does the Declude Virus log file say for one of these E-mails?

[Declude.Virus] Viruses targeted at Cell phones

2004-06-15 Thread John Tolmachoff \(Lists\)
What's next? OK, what can we do about these? http://www.sophos.com/virusinfo/analyses/symbcabira.html John Tolmachoff Engineer/Consultant/Owner eServices For You --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus

Re: [Declude.Virus] Virus notifications

2004-06-15 Thread R. Scott Perry
What is the current recommendation as far as virus notification setting goes? We need to make sure we aren't doing more harm than good in this arena. I know Matt had said he had some suggestions for us once when we where corresponding privately on another matter. We recommend running the latest

RE: [Declude.Virus] F-prot missing viruses - Revisited

2004-06-15 Thread John Tolmachoff \(Lists\)
There are products available to use with the IIS SMTP virtual server that can do this. John Tolmachoff Engineer/Consultant/Owner eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Keith Purtell Sent: Tuesday, June 15, 2004 1:24 PM

RE: [Declude.Virus] F-prot missing viruses

2004-06-15 Thread Keith Purtell
It says... 06/13/2004 15:38:49 Qbb483a9701d225cb Scanned: Virus Free [MIME: 3 23323] Keith Purtell, Web/Network Administrator VantageMed Corporation (Kansas City office) CONFIDENTIALITY NOTICE: This email message, including any attachments, is for the sole use of the intended recipient(s) and

Re: [Declude.Virus] Virus notifications

2004-06-15 Thread Greg Little
I send to everybody on NON-forging viruses (very few) I assume that most vulnerables and exploits are just spam and skip them with the forging viruses. If someone with Kak or a word macro virus tries to send a real file, then if everyone knows something can get figured out. Otherwise, it just

RE: [Declude.Virus] F-prot missing viruses

2004-06-15 Thread R. Scott Perry
06/13/2004 15:38:49 Qbb483a9701d225cb Scanned: Virus Free [MIME: 3 23323] That means that F-Prot didn't detect a virus (and didn't report any error). I'm doubting that it would have reported that there was no virus unless it really didn't see the virus. Could it be that the E-mail arrived

RE: [Declude.Virus] F-prot missing viruses

2004-06-15 Thread Keith Purtell
That is most likely what happened. Now I just have to make sure management understands that this is a fact of life on the Internet. By the way, the URL you posted was a very interesting article. Thanks! Keith Purtell, Web/Network Administrator VantageMed Corporation (Kansas City office) Voice:

RE: [Declude.Virus] F-prot missing viruses

2004-06-15 Thread Brad Morgan
That is most likely what happened. Now I just have to make sure management understands that this is a fact of life on the Internet. By the way, the URL you posted was a very interesting article. Thanks! If you are running Declude Virus Pro, then you could add one or more of the free virus

Re: [Declude.Virus] F-prot missing viruses

2004-06-15 Thread Bill Landry
- Original Message - From: Brad Morgan [EMAIL PROTECTED] If you are running Declude Virus Pro, then you could add one or more of the free virus scanners to your configuration. I added ClamAV after seeing an article that said it was very high on the list of who gets updates out the

Re: [Declude.Virus] F-prot missing viruses

2004-06-15 Thread R. Scott Perry
Another one is BitDefender. Their free scanner has just the right features for Declude Virus. It doesn't appear to be free for commercial use. I was sure that it allowed commercial use (or rather commercial use was not prohibited), but after going to http://www.bitdefender.com/ (and finding

RE: [Declude.Virus] F-prot missing viruses

2004-06-15 Thread John Tolmachoff \(Lists\)
Does not look like it can be called by command line. John Tolmachoff Engineer/Consultant/Owner eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry Sent: Tuesday, June 15, 2004 5:30 PM To: [EMAIL PROTECTED] Subject: Re:

RE: [Declude.Virus] F-prot missing viruses

2004-06-15 Thread Brad Morgan
Another one is BitDefender. Their free scanner has just the right features for Declude Virus. Does not look like it can be called by command line. I'm using the Free BitDefender for Windows and it does have a command line scanner. I don't remember seeing any licensing restrictions.

Re: [Declude.Virus] F-prot missing viruses

2004-06-15 Thread Bill Landry
- Original Message - From: R. Scott Perry [EMAIL PROTECTED] Another one is BitDefender. Their free scanner has just the right features for Declude Virus. It doesn't appear to be free for commercial use. I was sure that it allowed commercial use (or rather commercial use was