The top 10 is:
uu.net
chinanet-gd
kornet.net
above.net
chinanet-cq
level3.net
exodus.net
hinet.net
cw.net
interbusiness.it
http://www.theregister.co.uk/content/55/35937.html
~Rick
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On Behalf Of Markus G
Installed newest declude file and I'm still getting
(X-Declude-Status: Waiting for activation code) within the email header
Anyone know of a hack or hex editor I can use to fix this?
Thanks,
~Rick
___
Virus Scanned and Filtered by
> >Installed newest declude file and I'm still getting
> >
> >(X-Declude-Status: Waiting for activation code) within the
> email header
> >
> >Anyone know of a hack or hex editor I can use to fix this?
>
> If you upgrade to the latest interim it will remove that line.
>
Scott.. I did download a
Obviously not down in the upper 48's.. Working well from here ~ confirmed.
Always run multiple scanners.. And then some homebrew..
~ Rick
> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On
> Behalf Of David Dodell
> Sent: Monday, December 18, 2006 11:37 PM - MGM
http://www.asspsmtp.org/wiki/ClamAV_Win32
Try that.. Maybe it will work better with Declude?
~Rick
> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On
> Behalf Of Scott Fisher
> Sent: Thursday, March 01, 2007 2:05 PM - MGMT
> To: declude.virus@declude.com
> Subj
I didn't file a ticket.. what is this?
Rick
_
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
Sent: Tuesday, April 24, 2007 7:09 PM - MGMT
To: declude.virus@declude.com
Subject: [Declude.Virus] re: [072-0DC11263-CB79] You do not have permission
to post to the declude.virus@declude.c
Will you morons please remove me from your spam list?
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
Sent: Monday, February 04, 2008 10:33 PM
To: declude.virus@declude.com
Subject: [Declude.Virus] re: [1EE-0F3A4F36-9FAD] You do not have permission
to post to the declude.virus@declude.com li
Pat,
Here's a start for you:
http://www.mail-archive.com/[EMAIL PROTECTED]/msg72506.html
hth,
~Rick
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Pat Hastings
Sent: Monday, September 29, 2003 4:46 AM
To: [EMAIL PROTECTED]
Subject: [Declude.Virus] F-prot
Is this true for the DOS version of f-prot too?
~Rick
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of R. Scott Perry
Sent: Tuesday, October 28, 2003 6:50 PM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.Virus] containing the Unknown Virus
>Thanks for the he
Yes.. I think another poster recommended adding Private.zip into the declude
virus.cfg file to block that attachment
~Rick
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Kami Razvan
Sent: Wednesday, November 26, 2003 12:00 PM
To: [EMAIL PROTECTED]
Subject:
Scary thought for sure.. Thank God I banned *.zip files two days ago..
~Rick
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On Behalf Of John
> Tolmachoff (Lists)
> Sent: Monday, January 26, 2004 7:08 PM
> To: [EMAIL PROTECTED]
> Subject: RE: [Declude.Virus]
Geeze.. So you want the virus to only effect certain users?
~Rick
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On Behalf Of Robert
> Grosshandler
> Sent: Monday, January 26, 2004 9:19 PM
> To: [EMAIL PROTECTED]
> Subject: [Declude.Virus] BANEXT
>
>
> Than
We ban a lot more than that. Some files we ban, source code, is to prohibit
the sending/receiving of proprietary code. Although this may help stop the
theft of software/source code it's not perfect.
~Rick
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On Beh
That's all up to your acceptable use policy concerning email and
attachments. Most corps have folks zip the files.. Some lately even rename
them to something else like *.duh and just have the recipient rename it back
to zip and business as usual. I for one.. Send all kinds of attachments..
And it
Umm.. Don't you need to delete the blank line(s), within your *.eml files,
right after your SKIPIFVIRUSNAMESHAS .. ??
~Rick
>
> I recently added a couple of new SKIPIFVIRUSNAMEHAS entries
> to my .eml files. Then I noticed that I was no longer
> receiving any notifications at all. Upon revie
Posting to my post.. Sorry.. Something like this or is mine wrong?
Ommitt the dashes "-"
~Rick
--
SKIPIFVIRUSNAMEHAS Braid
SKIPIFVIRUSNAMEHAS Bridex
SKIPIFVIRUSNAMEHAS Bugbear
SKIPIFVIRUSNAMEHAS Dumar
SKIPIFVIRUSNAMEHAS Fizzer
SKIPIFVIR
Well Great!.. I learned something new today.
Thanks Kami,
~Rick
>
> Rick:
>
> It seems like you want to skip mailing the email if the
> sender is forged. With the latest release you can do the
> following. This is our sender.eml file. Using skipifforging
> you don't have to keep tarck o
There's also a 4th value that is used for terminal server, not to exceed
3072, ie: SharedSection=1024,3072,2048,512
~Rick
>
> Hello,
>
> It's a very long story how I got to this answer for our mail
> servers, but if you do the following registry change I'll bet
> a cup of coffee that your pr
Symantec labeled it [EMAIL PROTECTED] HA.. I just label it an "exe attachment
virus" and carry on. Surprisingly, since I thought most email admins block
exe attachments, this one is moving fast.
~Rick
>
> > F-Prot calls it w32/[EMAIL PROTECTED]
>
> You mean "Bagle" and not "Bagel" ?!
>
__
I chuck it with ASSP and if it makes it past that then declude should kick
it via the ban extension exe. If still passes that then hopefully the
F-Prot will woof it.
~Rick
Using mail server mail.famhost.com.220 ict-famhost.email.system X1
HELO www.declude.com
250 hello JaRay.net
MAIL FROM:
250
Scott,
Is this version for the declude virus our all the declude products?
Thanks,
~Rick
>
> >I haven't seen an answer to this thread. Ver 1.78 shows Waiting for
> >activation code, but reinstalling 1.77 will get rid of the
> >X-Declude-Status line. Ver 1.78 still works, but it sure is a
21 matches
Mail list logo
