|
Is Barracuda capable of handling the thousands of emails we receive daily?
Got hit with another one today.
Got the "oopsie" message from Message Labs.
Tired of being part of that "small subset of customers"...
<snip>
"Partially Missed Malware RunDate posted: 13 Sep 2016 1:43 PM Last
updated: 13 Sep 2016 1:56 PM
Please be advised that a small subset of customers may have received a
malicious mail with the following attachment in the mails. It was first
observed at around 12:00 UTC.
The subject line is “Accounts Documentation – Invoices”.
Filenames:
~264212140490290.zip (the numbers are random)
The file inside of zip is an hta file with a random number naming
convention.
Please advise any user that may have receive this mail to delete it
immediately. Our malware and spam team has worked vigorously and have
implemented quick Anti-Spam and Anti-Virus detection while additional
detection is still being worked on.
Our teams will continue to monitor this situation very closely, and we do
apologize for any inconvenience caused. "
</snip>
Rob Berendt
--
IBM Certified System Administrator - IBM i 6.1
Group Dekko
Dept 1600
Mail to: 2505 Dekko Drive
Garrett, IN 46738
Ship to: Dock 108
6928N 400E
Kendallville, IN 46755
http://www.dekko.com
From: stevepitcher@xxxxxxxxxxxxx
To: "Lotus Domino on the IBM i \(AS/400 and iSeries\)"
<domino400@xxxxxxxxxxxx>
Date: 08/23/2016 11:25 PM
Subject: Re: message snuck past Message Labs
Sent by: "Domino400" <domino400-bounces@xxxxxxxxxxxx>
Rob...
After mucking about with several solutions on Domino, on IBM i, on
Windows, hosted...I settled on a Barracuda antiviral/antispam appliance.
Low cost and just awesome. Haven't had a hiccup yet.
As for my opinion on Trend Micro...show your boss this bug...
https://bugs.chromium.org/p/project-zero/issues/detail?id=693&redir=1
Steve Pitcher
Enterprise Systems Manager
Phone: 902-895-8430 x3104
Fax: 902-893-1136
Email: stevepitcher@xxxxxxxxxxxxx
Website: www.scotsburn.com
Scotsburn Ice Cream Co. 85 Blakeney Drive Truro, N.S. B2N 6W9
Canada
From: Rob Berendt <rob@xxxxxxxxx>
To: "Lotus Domino on the IBM i \(AS/400 and iSeries\)"
<domino400@xxxxxxxxxxxx>
Date: 2016/08/23 02:55 PM
Subject: Re: message snuck past Message Labs
Sent by: "Domino400" <domino400-bounces@xxxxxxxxxxxx>
Is there some site which will state when each service found the virus?
For example, barracuda may catch it now but did they catch it any faster
than Message Labs?
More importantly, is there some way to see when Trend Micro scan mail for
Lotus Domino on Windows started stopping a particular virus?
Here's the urgent issue. We all know that Trend is desperately seeking to
drop Lotus Domino on IBM i by not supporting anything newer than 7.1 nor
any version of Domino that's recent. We removed it from IBM i.
My boss is offering me the opportunity of talking him out of moving our
Domino SMTP servers from IBM i to Windows. If I can't then they're gone.
We're paying for Trend Micro for Scanmail on Lotus Domino on Windows as
part of our contract.
If I can find something that says something to the effect that they didn't
update their virus pattern file for Domino until after we got clobbered
that might help.
Rob Berendt
--
IBM Certified System Administrator - IBM i 6.1
Group Dekko
Dept 1600
Mail to: 2505 Dekko Drive
Garrett, IN 46738
Ship to: Dock 108
6928N 400E
Kendallville, IN 46755
http://www.dekko.com
From: stevepitcher@xxxxxxxxxxxxx
To: "Lotus Domino on the IBM i \(AS/400 and iSeries\)"
<domino400@xxxxxxxxxxxx>
Date: 08/23/2016 12:05 PM
Subject: Re: message snuck past Message Labs
Sent by: "Domino400" <domino400-bounces@xxxxxxxxxxxx>
Get yourself a Barracuda, Rob.
Steve Pitcher
Enterprise Systems Manager
Phone: 902-895-8430 x3104
Fax: 902-893-1136
Email: stevepitcher@xxxxxxxxxxxxx
Website: www.scotsburn.com
Scotsburn Ice Cream Co. 85 Blakeney Drive Truro, N.S. B2N 6W9
Canada
From: Rob Berendt <rob@xxxxxxxxx>
To: domino400@xxxxxxxxxxxx
Date: 2016/08/23 12:23 PM
Subject: message snuck past Message Labs
Sent by: "Domino400" <domino400-bounces@xxxxxxxxxxxx>
<snip>
Partially Missed Malware Run
Date posted: 23 Aug 2016 12:50 PM Last updated: 23 Aug 2016 12:50 PM
Please be advised that a small subset of customers may have received a
malicious mail with the following attachment in the mails. It was first
observed at around 10:17 UTC.
Sender: voicemail@xxxxxxxxxxxxxxxxxxx
(The domain changes to who it is being sent to)
Subject: [Vigor2820 Series] New voice mail message from 01491435995 on
2016/08/23 16:21:15
(the phone number and time changes in the subject)
File Attached: Message_from_01491435995.wav.zip
Please advise any user that may have received this mail to delete it
immediately. Our malware and spam team has worked vigorously and have
implemented quick Anti-Spam and Anti-Virus detection while additional
detection is still being worked on.
Our teams will continue to monitor this situation very closely, and we do
apologize for any inconvenience caused.
</snip>
We've turned off Trend Micro's Scan Mail for Lotus Domino awhile back
since their updates and ability to support any version written this
century were lacking.
Rob Berendt
--
IBM Certified System Administrator - IBM i 6.1
Group Dekko
Dept 1600
Mail to: 2505 Dekko Drive
Garrett, IN 46738
Ship to: Dock 108
6928N 400E
Kendallville, IN 46755
http://www.dekko.com
--
This is the Lotus Domino on the IBM i (AS/400 and iSeries) (Domino400)
mailing list
To post a message email: Domino400@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/domino400
or email: Domino400-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/domino400.
--
This is the Lotus Domino on the IBM i (AS/400 and iSeries) (Domino400)
mailing list
To post a message email: Domino400@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/domino400
or email: Domino400-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/domino400.
--
This is the Lotus Domino on the IBM i (AS/400 and iSeries) (Domino400)
mailing list
To post a message email: Domino400@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/domino400
or email: Domino400-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/domino400.
--
This is the Lotus Domino on the IBM i (AS/400 and iSeries) (Domino400)
mailing list
To post a message email: Domino400@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/domino400
or email: Domino400-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/domino400.
--
This is the Lotus Domino on the IBM i (AS/400 and iSeries) (Domino400)
mailing list
To post a message email: Domino400@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/domino400
or email: Domino400-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/domino400.
As an Amazon Associate we earn from qualifying purchases.
This mailing list archive is Copyright 1997-2024 by midrange.com and David Gibbs as a compilation work. Use of the archive is restricted to research of a business or technical nature. Any other uses are prohibited. Full details are available on our policy page. If you have questions about this, please contact [javascript protected email address].
Operating expenses for this site are earned using the Amazon Associate program and Google Adsense.
midrange.com
