NETWORK PRESENCE ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT
 


Search
display results
words begin  exact words  any words part 

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [FW-1] Virus not detected by Trend VirusWall



Trend used to have some problems with the interscan viruswall engine.....
specifically a file called ISSMTPD.EXE. there has been a couple of releases
for this file to keep it up to date with the way that some polymorphic and
stealth viruses act and change.
You should be able to get update for their products from
ftp.trendmicro.co.uk <ftp://ftp.trendmicro.co.uk>
Or try www.sd.co.za/ftp/ <http://www.sd.co.za/ftp/>


mika

        -----Original Message-----
        From:   Elmar van Mourik [SMTP:[email protected]]
        Sent:   12 December 2001 12:27
        To:     [email protected]
        Subject:        [FW-1] Virus not detected by Trend VirusWall

        Hi all!

        I'm running FW-1 4.1 with Trend Viruswall CVP.
        Sometimes the CVP scanner does not recognize a virus in an
attachement or
        does not block on the extension.
        Has anyone had this problem before or knows the solution?

        Mail headers from the two emails in the spool directory on the Nokia
are:

        AV_SETTING:     cure
        AV_IPADDR:      192.168.75.10
        AV_PORT:        18181
        AV_HEADERS:     0
        COMPOUND:       0
        SRC:    194.159.73.251
        SPORT:  45482
        DST:    195.11.244.3
        DPORT:  25
        ERR_SERVER:     195.11.244.3
        RULE:   37
        RULEACT:        0
        ERRMAIL:        0
        ACCT:   0
        LOG_OK:          MDQ_LOG
        LOG_BAD:         MDQ_LOG
        LOG_ERR:         MDQ_ALERT



        AV_SETTING:     cure
        AV_IPADDR:      192.168.75.10
        AV_PORT:        18181
        AV_HEADERS:     0
        COMPOUND:       1
        SRC:    194.159.73.251
        SPORT:  33524
        DST:    195.11.244.3
        DPORT:  25
        ERR_SERVER:     195.11.244.3
        RULE:   37
        RULEACT:        0
        ERRMAIL:        0
        ACCT:   0
        LOG_OK:          MDQ_LOG
        LOG_BAD:         MDQ_LOG
        LOG_ERR:         MDQ_ALERT


        Elmar van Mourik
        Systeem en Netwerkbeheerder ZHEW
        Tel: +31 78 6397 289
        Fax: +31 78 6139 212


        ------------------------------
        Door de electronische verzending van het bericht kunnen er geen
rechten
        ontleend worden aan de informatie. Als u deze e-mail onterecht heeft
        ontvangen, waarschuwt u dan de afzender via [email protected] en
verwijder
        de gegevens van de computer.

        Zuiveringsschap Hollandse Eilanden en Waarden, Dordrecht
        tel: +31 (0)78 6397100
        fax: +31 (0)78 6311871
        web: http://www.zhew.nl

        =================================================
        To unsubscribe from this mailing list,
        please see the instructions at
        http://www.checkpoint.com/services/mailing.html
        =================================================
        To set vacation, Out Of Office, or away messages,
        send an email to [email protected]
        in the BODY of the email add:
        set fw-1-mailinglist nomail
        =================================================
        If you have any questions on how to change your
        subscription options, email Ron Alcatraz at:
        [email protected]
        =================================================


**********************************************************************
This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom they
are addressed. If you have received this email in error please notify
the system manager.

This footnote also confirms that this email message has been swept by
MIMEsweeper for the presence of computer viruses.

www.mimesweeper.com
**********************************************************************

=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
To set vacation, Out Of Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
If you have any questions on how to change your
subscription options, email Ron Alcatraz at:
[email protected]
=================================================



 
----------------------------------

ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT SITE MAP LEGAL
   All contents © 2004 Network Presence, LLC. All rights reserved.