RE: [Declude.Virus] New feature needed

2006-08-11 Thread David Barker
BanNotify.eml is sent out to people who try sending a banned file extension.
BounceNotify.eml is used with the BOUNCEONLYIFYOUMUST ACTION which will send
a "bounce" message - this should NOT be used except in rare cases.

David B
www.declude.com

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Gary
Steiner
Sent: Friday, August 11, 2006 1:09 PM
To: declude.virus@declude.com
Subject: RE: [Declude.Virus] New feature needed

I'm just trying to narrow these files down.  I don't want to stick something
in the Declude directory and have it exhibit unexpected behavior.  Also
there are many other files in the Declude directory that are unexplained and
may be left over from older versions, but I have no way to know if I can
delete them or not.

BounceNotify.eml is there, it was installed by Declude.  Though I just
tested it by sending myself a banned file, and it did not work, so maybe
Declude discontinued it at some point (David?).

There is no file called Vulnerabilty.eml in the Declude directory, so I
assume Declude does not install this by default.


 Original Message 
> From: "John T \(Lists\)" <[EMAIL PROTECTED]>
> Sent: Friday, August 11, 2006 3:56 AM
> To: declude.virus@declude.com
> Subject: RE: [Declude.Virus] New feature needed
> 
> Sorry, forgot to make an all inclusive list:
> 
> To my knowledge, there is no BounceNotify.eml.
> 
> JunkMail uses the following eml files ONLY:
> SpamAttach.eml
> 
> Confirm uses the following eml file ONLY:
> Confirm.eml
> 
> When EVA finds a vulnerability (list in the EVA manual further down 
> from the allow section) it uses the following file ONLY:
> Vulnerability.eml
> 
> When EVA finds a banned attachment and the associated email is not 
> found to be virus laden or contain a vulnerability, EVA will use the 
> following file
> ONLY:
> BanNotify.eml
> 
> ANY OTHER eml file contained in the \declude directory will be used by 
> EVA when a virus is found according to parameters within each file. 
> So, if you have 50 eml files aside from the above specifically 
> mentioned 4, EVA will try to use all 50 when it finds a virus.
> 
> The reason for this along with the original 4 other eml files normally 
> found (postmaster.eml, otherpostmaster.eml, sender.eml and 
> recipient.eml) was so that a appropriately worded notice be set to 
> each respective party as desired. However, that also allows for plenty 
> of customization. Example, I have a client that the manager wants a 
> copy of each notice sent. So I have created 2 specific eml files for 
> that client, one for if the infected email is incoming and one for if the
infected email is outgoing.
> 
> John T
> eServices For You
> 
> "Seek, and ye shall find!"
> 
> 
> > -Original Message-----
> > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of 
> > Gary Steiner
> > Sent: Thursday, August 10, 2006 9:05 PM
> > To: declude.virus@declude.com
> > Subject: RE: [Declude.Virus] New feature needed
> > 
> > But what defines a "vulnerability"?  Are you referring to the list 
> > of
> vulnerabilities
> > associated with the ALLOWVULNERABILITY statement in the EVA manual?  
> > I'm confused by the various .eml files Declude provides and how it 
> > decides to
> use them,
> > whether EVA or Junkmail.  None of the .eml files that come with 
> > Declude
> have the
> > name of a vulnerability.
> > 
> > Here is a list of the E-mail template files that came with the 
> > Declude 4.x
> installation
> > and how I guess that they are used (since there doesn't seem to be 
> > some
> centralized
> > description/list of what these files are and how they are used):
> > 
> > spamattach.eml - Used by Junkmail when ATTACH action is implemented.
> > 
> > postmaster.eml - Used by EVA to warn the postmaster of the local 
> > machine
> that a
> > virus was detected.
> > 
> > BOUNCEnotify.eml - Used by EVA to warn the local sender that his
> (outgoing) E-mail
> > attachment contained a banned extension.
> > 
> > BANnotify.eml - Used by EVA to warn the sender that his (incoming) 
> > E-mail attachment contained a banned extension.
> > 
> > otherpostmaster.eml - Used by EVA to warn the postmaster of a host 
> > that a
> virus
> > came from his server (typically not used due to virus forging).
> > 
> > sender.eml - Used by EVA to warn the sender that an E-mail sent by 
> > him was detected as a virus (typically not used due to virus forging).
> > 
> > recip.eml - Used by EVA to warn the recipient that Declude detected 

RE: [Declude.Virus] New feature needed

2006-08-11 Thread Gary Steiner
I'm just trying to narrow these files down.  I don't want to stick something in 
the Declude directory and have it exhibit unexpected behavior.  Also there are 
many other files in the Declude directory that are unexplained and may be left 
over from older versions, but I have no way to know if I can delete them or not.

BounceNotify.eml is there, it was installed by Declude.  Though I just tested 
it by sending myself a banned file, and it did not work, so maybe Declude 
discontinued it at some point (David?).

There is no file called Vulnerabilty.eml in the Declude directory, so I assume 
Declude does not install this by default.


 Original Message 
> From: "John T \(Lists\)" <[EMAIL PROTECTED]>
> Sent: Friday, August 11, 2006 3:56 AM
> To: declude.virus@declude.com
> Subject: RE: [Declude.Virus] New feature needed
> 
> Sorry, forgot to make an all inclusive list:
> 
> To my knowledge, there is no BounceNotify.eml.
> 
> JunkMail uses the following eml files ONLY:
> SpamAttach.eml
> 
> Confirm uses the following eml file ONLY:
> Confirm.eml
> 
> When EVA finds a vulnerability (list in the EVA manual further down from the
> allow section) it uses the following file ONLY:
> Vulnerability.eml
> 
> When EVA finds a banned attachment and the associated email is not found to
> be virus laden or contain a vulnerability, EVA will use the following file
> ONLY:
> BanNotify.eml
> 
> ANY OTHER eml file contained in the \declude directory will be used by EVA
> when a virus is found according to parameters within each file. So, if you
> have 50 eml files aside from the above specifically mentioned 4, EVA will
> try to use all 50 when it finds a virus.
> 
> The reason for this along with the original 4 other eml files normally found
> (postmaster.eml, otherpostmaster.eml, sender.eml and recipient.eml) was so
> that a appropriately worded notice be set to each respective party as
> desired. However, that also allows for plenty of customization. Example, I
> have a client that the manager wants a copy of each notice sent. So I have
> created 2 specific eml files for that client, one for if the infected email
> is incoming and one for if the infected email is outgoing.
> 
> John T
> eServices For You
> 
> "Seek, and ye shall find!"
> 
> 
> > -Original Message-
> > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Gary
> > Steiner
> > Sent: Thursday, August 10, 2006 9:05 PM
> > To: declude.virus@declude.com
> > Subject: RE: [Declude.Virus] New feature needed
> > 
> > But what defines a "vulnerability"?  Are you referring to the list of
> vulnerabilities
> > associated with the ALLOWVULNERABILITY statement in the EVA manual?  I'm
> > confused by the various .eml files Declude provides and how it decides to
> use them,
> > whether EVA or Junkmail.  None of the .eml files that come with Declude
> have the
> > name of a vulnerability.
> > 
> > Here is a list of the E-mail template files that came with the Declude 4.x
> installation
> > and how I guess that they are used (since there doesn't seem to be some
> centralized
> > description/list of what these files are and how they are used):
> > 
> > spamattach.eml - Used by Junkmail when ATTACH action is implemented.
> > 
> > postmaster.eml - Used by EVA to warn the postmaster of the local machine
> that a
> > virus was detected.
> > 
> > BOUNCEnotify.eml - Used by EVA to warn the local sender that his
> (outgoing) E-mail
> > attachment contained a banned extension.
> > 
> > BANnotify.eml - Used by EVA to warn the sender that his (incoming) E-mail
> > attachment contained a banned extension.
> > 
> > otherpostmaster.eml - Used by EVA to warn the postmaster of a host that a
> virus
> > came from his server (typically not used due to virus forging).
> > 
> > sender.eml - Used by EVA to warn the sender that an E-mail sent by him was
> > detected as a virus (typically not used due to virus forging).
> > 
> > recip.eml - Used by EVA to warn the recipient that Declude detected a
> virus send to
> > him.
> > 
> > confirm.eml - Used by Declude Confirm
> > (http://www.declude.com/Articles.asp?ID=127).  Is this a discontinued
> product?  If
> > not, does it work with SmarterMail?
> > 
> > 
> > So it seems that most of the files are used by EVA, one by Junkmail and
> one by
> > Confirm.  Does that mean that Junkmail and Confirm only use their one
> specific .eml
> > file and ignore all the others?  If I create a randomly named .eml file,
> will it only be
> 

RE: [Declude.Virus] New feature needed

2006-08-11 Thread John T \(Lists\)
Sorry, forgot to make an all inclusive list:

To my knowledge, there is no BounceNotify.eml.

JunkMail uses the following eml files ONLY:
SpamAttach.eml

Confirm uses the following eml file ONLY:
Confirm.eml

When EVA finds a vulnerability (list in the EVA manual further down from the
allow section) it uses the following file ONLY:
Vulnerability.eml

When EVA finds a banned attachment and the associated email is not found to
be virus laden or contain a vulnerability, EVA will use the following file
ONLY:
BanNotify.eml

ANY OTHER eml file contained in the \declude directory will be used by EVA
when a virus is found according to parameters within each file. So, if you
have 50 eml files aside from the above specifically mentioned 4, EVA will
try to use all 50 when it finds a virus.

The reason for this along with the original 4 other eml files normally found
(postmaster.eml, otherpostmaster.eml, sender.eml and recipient.eml) was so
that a appropriately worded notice be set to each respective party as
desired. However, that also allows for plenty of customization. Example, I
have a client that the manager wants a copy of each notice sent. So I have
created 2 specific eml files for that client, one for if the infected email
is incoming and one for if the infected email is outgoing.

John T
eServices For You

"Seek, and ye shall find!"


> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Gary
> Steiner
> Sent: Thursday, August 10, 2006 9:05 PM
> To: declude.virus@declude.com
> Subject: RE: [Declude.Virus] New feature needed
> 
> But what defines a "vulnerability"?  Are you referring to the list of
vulnerabilities
> associated with the ALLOWVULNERABILITY statement in the EVA manual?  I'm
> confused by the various .eml files Declude provides and how it decides to
use them,
> whether EVA or Junkmail.  None of the .eml files that come with Declude
have the
> name of a vulnerability.
> 
> Here is a list of the E-mail template files that came with the Declude 4.x
installation
> and how I guess that they are used (since there doesn't seem to be some
centralized
> description/list of what these files are and how they are used):
> 
> spamattach.eml - Used by Junkmail when ATTACH action is implemented.
> 
> postmaster.eml - Used by EVA to warn the postmaster of the local machine
that a
> virus was detected.
> 
> BOUNCEnotify.eml - Used by EVA to warn the local sender that his
(outgoing) E-mail
> attachment contained a banned extension.
> 
> BANnotify.eml - Used by EVA to warn the sender that his (incoming) E-mail
> attachment contained a banned extension.
> 
> otherpostmaster.eml - Used by EVA to warn the postmaster of a host that a
virus
> came from his server (typically not used due to virus forging).
> 
> sender.eml - Used by EVA to warn the sender that an E-mail sent by him was
> detected as a virus (typically not used due to virus forging).
> 
> recip.eml - Used by EVA to warn the recipient that Declude detected a
virus send to
> him.
> 
> confirm.eml - Used by Declude Confirm
> (http://www.declude.com/Articles.asp?ID=127).  Is this a discontinued
product?  If
> not, does it work with SmarterMail?
> 
> 
> So it seems that most of the files are used by EVA, one by Junkmail and
one by
> Confirm.  Does that mean that Junkmail and Confirm only use their one
specific .eml
> file and ignore all the others?  If I create a randomly named .eml file,
will it only be
> used by EVA?
> 
> 
> 
>  Original Message ----
> > From: "John T \(Lists\)" <[EMAIL PROTECTED]>
> > Sent: Thursday, August 10, 2006 9:37 PM
> > To: declude.virus@declude.com
> > Subject: RE: [Declude.Virus] New feature needed
> >
> > When a vulnerability is detected, it looks for vulnerability.eml only.
When
> > a virus is detected, it uses any and all .eml files except for
> > vulnerability.eml.
> >
> > So yes, you could do that.
> >
> > John T
> > eServices For You
> >
> > "Seek, and ye shall find!"
> >
> > > -Original Message-
> > > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
Gary
> > > Steiner
> > > Sent: Thursday, August 10, 2006 4:43 PM
> > > To: declude.virus@declude.com
> > > Subject: RE: [Declude.Virus] New feature needed
> > >
> > > I was wondering if there might be a work-around for this.  Could a
> > combination of
> > > multiple .eml files utilizing SKIPIFRECIP work?
> > >
> > > I guess the first question is what .eml files does Declude look for
when
> > it detects a
> > > virus?  Does EVA specifically look for a file named "recip.eml"?  Or
doe

RE: [Declude.Virus] New feature needed

2006-08-10 Thread Gary Steiner
But what defines a "vulnerability"?  Are you referring to the list of 
vulnerabilities associated with the ALLOWVULNERABILITY statement in the EVA 
manual?  I'm confused by the various .eml files Declude provides and how it 
decides to use them, whether EVA or Junkmail.  None of the .eml files that come 
with Declude have the name of a vulnerability.

Here is a list of the E-mail template files that came with the Declude 4.x 
installation and how I guess that they are used (since there doesn't seem to be 
some centralized description/list of what these files are and how they are 
used):

spamattach.eml - Used by Junkmail when ATTACH action is implemented.

postmaster.eml - Used by EVA to warn the postmaster of the local machine that a 
virus was detected.

BOUNCEnotify.eml - Used by EVA to warn the local sender that his (outgoing) 
E-mail attachment contained a banned extension.

BANnotify.eml - Used by EVA to warn the sender that his (incoming) E-mail 
attachment contained a banned extension.

otherpostmaster.eml - Used by EVA to warn the postmaster of a host that a virus 
came from his server (typically not used due to virus forging).

sender.eml - Used by EVA to warn the sender that an E-mail sent by him was 
detected as a virus (typically not used due to virus forging).

recip.eml - Used by EVA to warn the recipient that Declude detected a virus 
send to him.

confirm.eml - Used by Declude Confirm 
(http://www.declude.com/Articles.asp?ID=127).  Is this a discontinued product?  
If not, does it work with SmarterMail?


So it seems that most of the files are used by EVA, one by Junkmail and one by 
Confirm.  Does that mean that Junkmail and Confirm only use their one specific 
.eml file and ignore all the others?  If I create a randomly named .eml file, 
will it only be used by EVA?



 Original Message 
> From: "John T \(Lists\)" <[EMAIL PROTECTED]>
> Sent: Thursday, August 10, 2006 9:37 PM
> To: declude.virus@declude.com
> Subject: RE: [Declude.Virus] New feature needed
> 
> When a vulnerability is detected, it looks for vulnerability.eml only. When
> a virus is detected, it uses any and all .eml files except for
> vulnerability.eml. 
> 
> So yes, you could do that.
> 
> John T
> eServices For You
> 
> "Seek, and ye shall find!"
> 
> > -Original Message-
> > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Gary
> > Steiner
> > Sent: Thursday, August 10, 2006 4:43 PM
> > To: declude.virus@declude.com
> > Subject: RE: [Declude.Virus] New feature needed
> > 
> > I was wondering if there might be a work-around for this.  Could a
> combination of
> > multiple .eml files utilizing SKIPIFRECIP work?
> > 
> > I guess the first question is what .eml files does Declude look for when
> it detects a
> > virus?  Does EVA specifically look for a file named "recip.eml"?  Or does
> it look at all
> > the .eml files in the main Declude directory?
> > 
> > Could you have two files, one called recip-en.eml (English) and one called
> recip-
> > es.eml (Spanish), and then list in those files using SKIPIFRECIP all the
> domains that
> > want the other language?
> > 
> > Gary
> > 
> > 
> >  Original Message 
> > > From: "Goran Jovanovic" <[EMAIL PROTECTED]>
> > > Sent: Tuesday, June 20, 2006 3:57 PM
> > > To: declude.virus@declude.com
> > > Subject: RE: [Declude.Virus] New feature needed
> > >
> > > Gary,
> > >
> > > I have not even thought of something like that (since all my customers
> > > are English speaking) but you are absolutely right.
> > >
> > > So David will we be seeing this new feature next week? :)
> > >
> > > Goran Jovanovic
> > > Omega Network Solutions
> > >
> > >
> > >
> > > > -Original Message-
> > > > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
> > > Gary
> > > > Steiner
> > > > Sent: Tuesday, June 20, 2006 3:24 PM
> > > > To: declude.virus@declude.com
> > > > Subject: re: [Declude.Virus] New feature needed
> > > >
> > > >
> > > > I asked about the possibility of per domain replies several months
> > > ago.  I
> > > > would hope that it has already been placed on the wish list.
> > > >
> > > > It is especially useful when you have users speaking different
> > > languages
> > > > and you want to have language specific messages linked to each domain.
> > > >
> > > > Gary
> > > >
> > > >

RE: [Declude.Virus] New feature needed

2006-08-10 Thread John T \(Lists\)
When a vulnerability is detected, it looks for vulnerability.eml only. When
a virus is detected, it uses any and all .eml files except for
vulnerability.eml. 

So yes, you could do that.

John T
eServices For You

"Seek, and ye shall find!"

> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Gary
> Steiner
> Sent: Thursday, August 10, 2006 4:43 PM
> To: declude.virus@declude.com
> Subject: RE: [Declude.Virus] New feature needed
> 
> I was wondering if there might be a work-around for this.  Could a
combination of
> multiple .eml files utilizing SKIPIFRECIP work?
> 
> I guess the first question is what .eml files does Declude look for when
it detects a
> virus?  Does EVA specifically look for a file named "recip.eml"?  Or does
it look at all
> the .eml files in the main Declude directory?
> 
> Could you have two files, one called recip-en.eml (English) and one called
recip-
> es.eml (Spanish), and then list in those files using SKIPIFRECIP all the
domains that
> want the other language?
> 
> Gary
> 
> 
>  Original Message 
> > From: "Goran Jovanovic" <[EMAIL PROTECTED]>
> > Sent: Tuesday, June 20, 2006 3:57 PM
> > To: declude.virus@declude.com
> > Subject: RE: [Declude.Virus] New feature needed
> >
> > Gary,
> >
> > I have not even thought of something like that (since all my customers
> > are English speaking) but you are absolutely right.
> >
> > So David will we be seeing this new feature next week? :)
> >
> > Goran Jovanovic
> > Omega Network Solutions
> >
> >
> >
> > > -----Original Message-----
> > > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
> > Gary
> > > Steiner
> > > Sent: Tuesday, June 20, 2006 3:24 PM
> > > To: declude.virus@declude.com
> > > Subject: re: [Declude.Virus] New feature needed
> > >
> > >
> > > I asked about the possibility of per domain replies several months
> > ago.  I
> > > would hope that it has already been placed on the wish list.
> > >
> > > It is especially useful when you have users speaking different
> > languages
> > > and you want to have language specific messages linked to each domain.
> > >
> > > Gary
> > >
> > >
> > >  Original Message 
> > > > From: "Goran Jovanovic" <[EMAIL PROTECTED]>
> > > > Sent: Tuesday, June 20, 2006 2:30 PM
> > > > To: declude.virus@declude.com
> > > > Subject: [Declude.Virus] New feature needed
> > > >
> > > > Hi,
> > > >
> > > > I would like to suggest a new feature to be added to the virus
> > > > notification capabilities.
> > > >
> > > > Right now to notify a recipient that I stopped a virus I have a
> > > > recip.eml file in my main delude directory. There is another
> > > > recip-vulnerability.eml file that is used if the "virus" is a
> > > > vulnerability. These two files are all or nothing files. Meaning
> > that
> > > > all recipients for all the domains that I process are in the same
> > file.
> > > >
> > > > I need to be able to specify a per domain recip.eml file. This way I
> > can
> > > > tailor the notifications to each domain as appropriate. These files
> > > > should be in the domain subdirectory along with the
> > $default$.junkfile
> > > > etc.
> > > >
> > > > I am faced with the challenge right now for a single domain to send
> > all
> > > > virus notification to one person only or to stop all notifications
> > to
> > > > that domain. To the best of my knowledge I cannot redirect all the
> > > > notifications to the one person for that domain and to the original
> > > > recipients for all the other domains.
> > > >
> > > > Another feature that should be added to the *.eml files is the
> > ability
> > > > to do a BCC to a monitoring address. This is a good way to monitor
> > what
> > > > is happening with banned files, viruses or whatever notification
> > > > processes we have setup.
> > > >
> > > > So can you please add this to the "to do" list
> > > >
> > > > Thank you
> > > >
> > > > Goran Jovanovic
> > > > Omega Network Solutions
> > > >
> > > >
> > > > ---
> > > > This

RE: [Declude.Virus] New feature needed

2006-08-10 Thread Gary Steiner
I was wondering if there might be a work-around for this.  Could a combination 
of multiple .eml files utilizing SKIPIFRECIP work?

I guess the first question is what .eml files does Declude look for when it 
detects a virus?  Does EVA specifically look for a file named "recip.eml"?  Or 
does it look at all the .eml files in the main Declude directory?

Could you have two files, one called recip-en.eml (English) and one called 
recip-es.eml (Spanish), and then list in those files using SKIPIFRECIP all the 
domains that want the other language?

Gary


 Original Message 
> From: "Goran Jovanovic" <[EMAIL PROTECTED]>
> Sent: Tuesday, June 20, 2006 3:57 PM
> To: declude.virus@declude.com
> Subject: RE: [Declude.Virus] New feature needed
> 
> Gary,
> 
> I have not even thought of something like that (since all my customers
> are English speaking) but you are absolutely right. 
> 
> So David will we be seeing this new feature next week? :)
> 
> Goran Jovanovic
> Omega Network Solutions
> 
>  
> 
> > -Original Message-
> > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
> Gary
> > Steiner
> > Sent: Tuesday, June 20, 2006 3:24 PM
> > To: declude.virus@declude.com
> > Subject: re: [Declude.Virus] New feature needed
> > 
> > 
> > I asked about the possibility of per domain replies several months
> ago.  I
> > would hope that it has already been placed on the wish list.
> > 
> > It is especially useful when you have users speaking different
> languages
> > and you want to have language specific messages linked to each domain.
> > 
> > Gary
> > 
> > 
> >  Original Message 
> > > From: "Goran Jovanovic" <[EMAIL PROTECTED]>
> > > Sent: Tuesday, June 20, 2006 2:30 PM
> > > To: declude.virus@declude.com
> > > Subject: [Declude.Virus] New feature needed
> > >
> > > Hi,
> > >
> > > I would like to suggest a new feature to be added to the virus
> > > notification capabilities.
> > >
> > > Right now to notify a recipient that I stopped a virus I have a
> > > recip.eml file in my main delude directory. There is another
> > > recip-vulnerability.eml file that is used if the "virus" is a
> > > vulnerability. These two files are all or nothing files. Meaning
> that
> > > all recipients for all the domains that I process are in the same
> file.
> > >
> > > I need to be able to specify a per domain recip.eml file. This way I
> can
> > > tailor the notifications to each domain as appropriate. These files
> > > should be in the domain subdirectory along with the
> $default$.junkfile
> > > etc.
> > >
> > > I am faced with the challenge right now for a single domain to send
> all
> > > virus notification to one person only or to stop all notifications
> to
> > > that domain. To the best of my knowledge I cannot redirect all the
> > > notifications to the one person for that domain and to the original
> > > recipients for all the other domains.
> > >
> > > Another feature that should be added to the *.eml files is the
> ability
> > > to do a BCC to a monitoring address. This is a good way to monitor
> what
> > > is happening with banned files, viruses or whatever notification
> > > processes we have setup.
> > >
> > > So can you please add this to the "to do" list
> > >
> > > Thank you
> > >
> > > Goran Jovanovic
> > > Omega Network Solutions
> > >
> > >
> > > ---
> > > This E-mail came from the Declude.Virus mailing list.  To
> > > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> > > type "unsubscribe Declude.Virus".The archives can be found
> > > at http://www.mail-archive.com.
> > 
> > 
> > 
> > 
> > 
> > ---
> > This E-mail came from the Declude.Virus mailing list.  To
> > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> > type "unsubscribe Declude.Virus".The archives can be found
> > at http://www.mail-archive.com.
> 
> 
> 
> ---
> This E-mail came from the Declude.Virus mailing list.  To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.Virus".The archives can be found
> at http://www.mail-archive.com. 





---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".The archives can be found
at http://www.mail-archive.com.



Re: [Declude.Virus] New feature needed

2006-06-20 Thread netsolution webmaster




We use the Imail inbound rules to achieve this, scan for the message
subject (that you define in the .eml file) in the inbound rule for the
respective domain and forward it to wherever you want.

AIR

David Barker schrieb:

  Not sure yet, but not for at least the next 60 days.

David B
www.declude.com 

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Goran
Jovanovic
Sent: Tuesday, June 20, 2006 3:23 PM
To: declude.virus@declude.com
Subject: RE: [Declude.Virus] New feature needed

David,

Any idea when it might make it as a feature in the code?

Goran Jovanovic
Omega Network Solutions

 

  
  
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of

  
  David
  
  
Barker
Sent: Tuesday, June 20, 2006 2:58 PM
To: declude.virus@declude.com
Subject: RE: [Declude.Virus] New feature needed


Added to the development wish list.

David B
www.declude.com

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of

  
  Goran
  
  
Jovanovic
Sent: Tuesday, June 20, 2006 2:12 PM
To: declude.virus@declude.com
Subject: [Declude.Virus] New feature needed

Hi,

I would like to suggest a new feature to be added to the virus 
notification capabilities.

Right now to notify a recipient that I stopped a virus I have a

  
  recip.eml
  
  
file in my main delude directory. There is another

  
  recip-vulnerability.eml
  
  
file that is used if the "virus" is a vulnerability. These two files

  
  are
  
  
all
or nothing files. Meaning that all recipients for all the domains that

  
  I
  
  
process are in the same file.

I need to be able to specify a per domain recip.eml file. This way I

  
  can
  
  
tailor the notifications to each domain as appropriate. These files

  
  should
  
  
be in the domain subdirectory along with the $default$.junkfile etc.

I am faced with the challenge right now for a single domain to send

  
  all
  
  
virus notification to one person only or to stop all notifications to

  
  that
  
  
domain. To the best of my knowledge I cannot redirect all the 
notifications to the one person for that domain and to the original 
recipients for

  
  all
  
  
the
other domains.

Another feature that should be added to the *.eml files is the ability

  
  to
  
  
do
a BCC to a monitoring address. This is a good way to monitor what is 
happening with banned files, viruses or whatever notification

  
  processes we
  
  
have setup.

So can you please add this to the "to do" list

Thank you

Goran Jovanovic
Omega Network Solutions


---
This E-mail came from the Declude.Virus mailing list.  To unsubscribe, 
just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".The archives can be found
at http://www.mail-archive.com.



---
This E-mail came from the Declude.Virus mailing list.  To unsubscribe, 
just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".The archives can be found
at http://www.mail-archive.com.

  
  


---
This E-mail came from the Declude.Virus mailing list.  To unsubscribe, just
send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".The archives can be found
at http://www.mail-archive.com.



---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".The archives can be found
at http://www.mail-archive.com.

  





---This E-mail came from the Declude.Virus mailing list.  Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.Virus".The archives can be foundat http://www.mail-archive.com.

RE: [Declude.Virus] New feature needed

2006-06-20 Thread David Barker
Not sure yet, but not for at least the next 60 days.

David B
www.declude.com 

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Goran
Jovanovic
Sent: Tuesday, June 20, 2006 3:23 PM
To: declude.virus@declude.com
Subject: RE: [Declude.Virus] New feature needed

David,

Any idea when it might make it as a feature in the code?

Goran Jovanovic
Omega Network Solutions

 

> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
David
> Barker
> Sent: Tuesday, June 20, 2006 2:58 PM
> To: declude.virus@declude.com
> Subject: RE: [Declude.Virus] New feature needed
> 
> 
> Added to the development wish list.
> 
> David B
> www.declude.com
> 
> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
Goran
> Jovanovic
> Sent: Tuesday, June 20, 2006 2:12 PM
> To: declude.virus@declude.com
> Subject: [Declude.Virus] New feature needed
> 
> Hi,
> 
> I would like to suggest a new feature to be added to the virus 
> notification capabilities.
> 
> Right now to notify a recipient that I stopped a virus I have a
recip.eml
> file in my main delude directory. There is another
recip-vulnerability.eml
> file that is used if the "virus" is a vulnerability. These two files
are
> all
> or nothing files. Meaning that all recipients for all the domains that
I
> process are in the same file.
> 
> I need to be able to specify a per domain recip.eml file. This way I
can
> tailor the notifications to each domain as appropriate. These files
should
> be in the domain subdirectory along with the $default$.junkfile etc.
> 
> I am faced with the challenge right now for a single domain to send
all
> virus notification to one person only or to stop all notifications to
that
> domain. To the best of my knowledge I cannot redirect all the 
> notifications to the one person for that domain and to the original 
> recipients for
all
> the
> other domains.
> 
> Another feature that should be added to the *.eml files is the ability
to
> do
> a BCC to a monitoring address. This is a good way to monitor what is 
> happening with banned files, viruses or whatever notification
processes we
> have setup.
> 
> So can you please add this to the "to do" list
> 
> Thank you
> 
> Goran Jovanovic
> Omega Network Solutions
> 
> 
> ---
> This E-mail came from the Declude.Virus mailing list.  To unsubscribe, 
> just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.Virus".The archives can be found
> at http://www.mail-archive.com.
> 
> 
> 
> ---
> This E-mail came from the Declude.Virus mailing list.  To unsubscribe, 
> just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.Virus".The archives can be found
> at http://www.mail-archive.com.



---
This E-mail came from the Declude.Virus mailing list.  To unsubscribe, just
send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".The archives can be found
at http://www.mail-archive.com.



---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".The archives can be found
at http://www.mail-archive.com.



RE: [Declude.Virus] New feature needed

2006-06-20 Thread Goran Jovanovic
> 
> I do some limited "customization" using filters/rules on the domain in
> Imail ... 

This might work for you but I gateway most of my domains so this does
not seem like a good option for me.

Also since I have per-domain configs in Declude these notifications
should be handled in the same way

Goran Jovanovic
Omega Network Solutions


---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".The archives can be found
at http://www.mail-archive.com.



RE: [Declude.Virus] New feature needed

2006-06-20 Thread Goran Jovanovic
Gary,

I have not even thought of something like that (since all my customers
are English speaking) but you are absolutely right. 

So David will we be seeing this new feature next week? :)

Goran Jovanovic
Omega Network Solutions

 

> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
Gary
> Steiner
> Sent: Tuesday, June 20, 2006 3:24 PM
> To: declude.virus@declude.com
> Subject: re: [Declude.Virus] New feature needed
> 
> 
> I asked about the possibility of per domain replies several months
ago.  I
> would hope that it has already been placed on the wish list.
> 
> It is especially useful when you have users speaking different
languages
> and you want to have language specific messages linked to each domain.
> 
> Gary
> 
> 
>  Original Message 
> > From: "Goran Jovanovic" <[EMAIL PROTECTED]>
> > Sent: Tuesday, June 20, 2006 2:30 PM
> > To: declude.virus@declude.com
> > Subject: [Declude.Virus] New feature needed
> >
> > Hi,
> >
> > I would like to suggest a new feature to be added to the virus
> > notification capabilities.
> >
> > Right now to notify a recipient that I stopped a virus I have a
> > recip.eml file in my main delude directory. There is another
> > recip-vulnerability.eml file that is used if the "virus" is a
> > vulnerability. These two files are all or nothing files. Meaning
that
> > all recipients for all the domains that I process are in the same
file.
> >
> > I need to be able to specify a per domain recip.eml file. This way I
can
> > tailor the notifications to each domain as appropriate. These files
> > should be in the domain subdirectory along with the
$default$.junkfile
> > etc.
> >
> > I am faced with the challenge right now for a single domain to send
all
> > virus notification to one person only or to stop all notifications
to
> > that domain. To the best of my knowledge I cannot redirect all the
> > notifications to the one person for that domain and to the original
> > recipients for all the other domains.
> >
> > Another feature that should be added to the *.eml files is the
ability
> > to do a BCC to a monitoring address. This is a good way to monitor
what
> > is happening with banned files, viruses or whatever notification
> > processes we have setup.
> >
> > So can you please add this to the "to do" list
> >
> > Thank you
> >
> > Goran Jovanovic
> > Omega Network Solutions
> >
> >
> > ---
> > This E-mail came from the Declude.Virus mailing list.  To
> > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> > type "unsubscribe Declude.Virus".The archives can be found
> > at http://www.mail-archive.com.
> 
> 
> 
> 
> 
> ---
> This E-mail came from the Declude.Virus mailing list.  To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.Virus".The archives can be found
> at http://www.mail-archive.com.



---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".The archives can be found
at http://www.mail-archive.com.



Re: [Declude.Virus] New feature needed

2006-06-20 Thread David Dodell
> I would like to suggest a new feature to be added to the virus
> notification capabilities.

> I need to be able to specify a per domain recip.eml file. This way I can
> tailor the notifications to each domain as appropriate. These files
> should be in the domain subdirectory along with the $default$.junkfile
> etc.


I do some limited "customization" using filters/rules on the domain in
Imail ... this has let me filter out notifications and deleting the
message automatically for domains that didn't want the notifications,
or redirect the notifications to another administrator if needed.

It adds an extra layer to the mail movement, but it works for now.

David



---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".The archives can be found
at http://www.mail-archive.com.



re: [Declude.Virus] New feature needed

2006-06-20 Thread Gary Steiner
I asked about the possibility of per domain replies several months ago.  I 
would hope that it has already been placed on the wish list.

It is especially useful when you have users speaking different languages and 
you want to have language specific messages linked to each domain.

Gary


 Original Message 
> From: "Goran Jovanovic" <[EMAIL PROTECTED]>
> Sent: Tuesday, June 20, 2006 2:30 PM
> To: declude.virus@declude.com
> Subject: [Declude.Virus] New feature needed
> 
> Hi,
> 
> I would like to suggest a new feature to be added to the virus
> notification capabilities.
> 
> Right now to notify a recipient that I stopped a virus I have a
> recip.eml file in my main delude directory. There is another
> recip-vulnerability.eml file that is used if the "virus" is a
> vulnerability. These two files are all or nothing files. Meaning that
> all recipients for all the domains that I process are in the same file. 
> 
> I need to be able to specify a per domain recip.eml file. This way I can
> tailor the notifications to each domain as appropriate. These files
> should be in the domain subdirectory along with the $default$.junkfile
> etc.
> 
> I am faced with the challenge right now for a single domain to send all
> virus notification to one person only or to stop all notifications to
> that domain. To the best of my knowledge I cannot redirect all the
> notifications to the one person for that domain and to the original
> recipients for all the other domains. 
> 
> Another feature that should be added to the *.eml files is the ability
> to do a BCC to a monitoring address. This is a good way to monitor what
> is happening with banned files, viruses or whatever notification
> processes we have setup.
> 
> So can you please add this to the "to do" list
> 
> Thank you
> 
> Goran Jovanovic
> Omega Network Solutions
> 
> 
> ---
> This E-mail came from the Declude.Virus mailing list.  To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.Virus".The archives can be found
> at http://www.mail-archive.com. 





---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".The archives can be found
at http://www.mail-archive.com.



RE: [Declude.Virus] New feature needed

2006-06-20 Thread Goran Jovanovic
David,

Any idea when it might make it as a feature in the code?

Goran Jovanovic
Omega Network Solutions

 

> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
David
> Barker
> Sent: Tuesday, June 20, 2006 2:58 PM
> To: declude.virus@declude.com
> Subject: RE: [Declude.Virus] New feature needed
> 
> 
> Added to the development wish list.
> 
> David B
> www.declude.com
> 
> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
Goran
> Jovanovic
> Sent: Tuesday, June 20, 2006 2:12 PM
> To: declude.virus@declude.com
> Subject: [Declude.Virus] New feature needed
> 
> Hi,
> 
> I would like to suggest a new feature to be added to the virus
> notification
> capabilities.
> 
> Right now to notify a recipient that I stopped a virus I have a
recip.eml
> file in my main delude directory. There is another
recip-vulnerability.eml
> file that is used if the "virus" is a vulnerability. These two files
are
> all
> or nothing files. Meaning that all recipients for all the domains that
I
> process are in the same file.
> 
> I need to be able to specify a per domain recip.eml file. This way I
can
> tailor the notifications to each domain as appropriate. These files
should
> be in the domain subdirectory along with the $default$.junkfile etc.
> 
> I am faced with the challenge right now for a single domain to send
all
> virus notification to one person only or to stop all notifications to
that
> domain. To the best of my knowledge I cannot redirect all the
> notifications
> to the one person for that domain and to the original recipients for
all
> the
> other domains.
> 
> Another feature that should be added to the *.eml files is the ability
to
> do
> a BCC to a monitoring address. This is a good way to monitor what is
> happening with banned files, viruses or whatever notification
processes we
> have setup.
> 
> So can you please add this to the "to do" list
> 
> Thank you
> 
> Goran Jovanovic
> Omega Network Solutions
> 
> 
> ---
> This E-mail came from the Declude.Virus mailing list.  To unsubscribe,
> just
> send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.Virus".The archives can be found
> at http://www.mail-archive.com.
> 
> 
> 
> ---
> This E-mail came from the Declude.Virus mailing list.  To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.Virus".The archives can be found
> at http://www.mail-archive.com.



---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".The archives can be found
at http://www.mail-archive.com.



RE: [Declude.Virus] New feature needed

2006-06-20 Thread David Barker
Added to the development wish list.

David B
www.declude.com 

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Goran
Jovanovic
Sent: Tuesday, June 20, 2006 2:12 PM
To: declude.virus@declude.com
Subject: [Declude.Virus] New feature needed

Hi,

I would like to suggest a new feature to be added to the virus notification
capabilities.

Right now to notify a recipient that I stopped a virus I have a recip.eml
file in my main delude directory. There is another recip-vulnerability.eml
file that is used if the "virus" is a vulnerability. These two files are all
or nothing files. Meaning that all recipients for all the domains that I
process are in the same file. 

I need to be able to specify a per domain recip.eml file. This way I can
tailor the notifications to each domain as appropriate. These files should
be in the domain subdirectory along with the $default$.junkfile etc.

I am faced with the challenge right now for a single domain to send all
virus notification to one person only or to stop all notifications to that
domain. To the best of my knowledge I cannot redirect all the notifications
to the one person for that domain and to the original recipients for all the
other domains. 

Another feature that should be added to the *.eml files is the ability to do
a BCC to a monitoring address. This is a good way to monitor what is
happening with banned files, viruses or whatever notification processes we
have setup.

So can you please add this to the "to do" list

Thank you

Goran Jovanovic
Omega Network Solutions


---
This E-mail came from the Declude.Virus mailing list.  To unsubscribe, just
send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".The archives can be found
at http://www.mail-archive.com.



---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".The archives can be found
at http://www.mail-archive.com.