PDA

View Full Version : anyway to check outgoing mail


Cameron Arnott
July 2nd, 2003, 06:41 AM
Hi,

I was wondering if there is a way to get nod32 V2 to check outgoing mail and notify you if the msg your trying to send contains a virus. and if the msg is clean to then place an inspection notice on your outgoing emails as nod32 does on the incomming emails.

I believe that this would increase the value and perception of Nod32 as many ppl i talk to have never even heard of nod32 :( I know that that is hard to believe but its true

Rieske
July 2nd, 2003, 08:56 AM
Plz not this standard Norton nonsense...
Never understood the sense of scanning outgoing mail.

Hint: don't use an adress book, copy & paste ur mail adresses in a plain *.txt file. If u need an adress simply copy & paste from that file.

martindijk
July 2nd, 2003, 09:10 AM
Hi Cameron,

No, there is not a way, cause when NOD did a full scan and found nothing, it is not necessary to scan an outgoing file, cause your pc is safe and contains no virusses, so the scanning of outgoing mail has no use.

rgds,
Martin

Douglas
July 2nd, 2003, 09:17 AM
I believe Cameron is less concerned with the actual scan of outgoing, than the ability to have a little "advertisement" making friends aware of NOD.

Regards,
Douglas

Cameron
July 2nd, 2003, 09:17 AM
Hi,

I know its not everyones cup of tea.. however I for one am proud of nod32. and I'd hate to help spread viruses.. so I for one would definatly like to know if anything going out of my system is infected. As a reseller and user of nod32 I don't think it would look too good if i sent an email or attachment which was infected.

As for Norton stuff you mentioned , I for one wouldn't have a clue what you are talking about because i've never used any norton stuff.. ever.. and never will....

As for adding txt to a msg stating that it has been checked by nod32.. its a bit silly if you the user of the nod32 program are the only one who gets notified.. come on.. think about it.. we are already converted to using the best antivirus software..

I don't knbow much about pop3 / smtp protocols.. so this next question may sound silly..
can I just set up nod32 to scan the outgoing port to get it to scan the email ?

I'd really like a way to get nod32 to scan outgoing mail and attachments

Cameron
July 2nd, 2003, 09:28 AM
Hi,

Lets set a hypothetical..

You have Imon set up to scan incomming mail. and amon running in the background..

lets say that I recieve a virus in my mail that nod32 doesn't know about yet (unlikely i know.. ) I mon has scanned the incomming msg and given it the ok. then My system has the infected email on it..

Then I update nod32 as usual (at least twice a day i check for updates) and it updates itself with the new virus.. But its too late to catch the msg comming in with that virus. (unless I do a manual scan on my system).

If nod32 had the ability to check outgoing mail then the next time i sent a msg (after updating nod32) then it would catch the virus and inform me.. thus limiting the spread of the virus

Most ppl out there don't know that they are spreading the viruses.. I have been accused before on many occasions that i infected someones system.. and me telling someone that my system is clean because i use a virus checker just doesn't cut it with most Irate ppl who have been infected..

martindijk
July 2nd, 2003, 09:31 AM
No, cause double checking a file that has allready been scanned by NOD would be nonsence and would have no use.

rgds,
Martin

Cameron
July 2nd, 2003, 09:51 AM
Ok,

I've worked out a way to get nod32 to do it.

Here is what i've worked out

Simply CC: the msgs back to your own account..
then nod32 scans it as you recieve the CC:'d msg :)

As for the Spreading of the word about nod32 i've included this line in my signature

Note: My system is kept clean of viruses because I use Nod32 AntiVirus.
If you would like more info about it then please contact me


I still wish there was a better way

Thanks for putting up with me.

martindijk
July 2nd, 2003, 09:57 AM
Hi Cameron,

With this setup, will the recipient also get the message that the email has been scanned by NOD??

rgds,
Martin

Cameron
July 2nd, 2003, 10:33 AM
Hi,

I've sent you a test msg as asked..

However I don't think that they get to see the Generated msg by nod32

Only get to see what you put in your signature..

But at least you get to see that the msgs your sending out are clean

Cameron

Marcos
July 2nd, 2003, 10:39 AM
Hi all,
good news, this feature is going to be incorporated into EMON soon. Some time later, it might be incorporated into AMON too, however, even without this feature, AMON prevents infected files from being attached to outbounding emails.

Cameron
July 2nd, 2003, 10:49 AM
;D ;D ;D ;D ;D ;D ;D ;D ;D ;D ;D ;D ;D ;D ;D ;D

Many Thanks
Cameron

martindijk
July 2nd, 2003, 10:59 AM
Hi Cameron,

Received the mail with the siggy, looks good, send you one back.
Let me know, oké.

rgds,
Martin

Rainwalker
July 2nd, 2003, 12:09 PM
Greetings Marcos,
I do not have EMON as part of my NOD V. 2 program. At least it is not showing itself. I have seen it depicted on screen shots. What am I missing? Thank you

martindijk
July 2nd, 2003, 12:16 PM
Hi Rainwalker,

Emon is only installed if you use MAPI, like Microsoft Outlook, otherwise it will be AMON, NOD32 and IMON.

rgds,
Martin

Marcos
July 2nd, 2003, 12:20 PM
Hi,
as Martin pointed out correctly, during installation NOD32 automatically detects if MS Outlook is installed in Corporate mode and, if it is, offers you an option to install EMON. Otherwise, this particular module won't be installed.

Rainwalker
July 2nd, 2003, 12:51 PM
Thanks guys That clears that up

WilliamP
July 2nd, 2003, 04:43 PM
What is corporate mode for Outlook?

Bdiamond
July 2nd, 2003, 04:55 PM
While the reasons not to have outgoing E-mail scanned are compelling, I am very happy to hear it may be implemented. One of the clients I work with very specifically asked about this after reviewing the plan to insure confidentaility and securtiy of the project. I offered to switch to Norton if they would be more comfortable. If this perception is prevelant, then it may well be a prudent (maybe even smart) marketing strategy for Eset even though the "hard" rationale is not there.

Bdiamond

vrf
July 3rd, 2003, 02:51 AM
I know many won't agree with me but I think the best way to avoid getting infected by e-mail is using web-based mail accounts like Yahoo or Hotmail. They have complex professional scanners, no home users have that, so surely they'll stop more viruses than any av for home users. I sometimes received infected emails but I was never infected cause I mostly use web-based mail and if an e-mail was infected, it simply appeared blank, Hotmail disinfected it for me, so it never got into my computer.

fryr
July 15th, 2003, 06:45 AM
I agree - there should be a way to scan outgoing email's.

If the outgoing email is being posted by an undetected virus and the virus patterns have since been updated the virus should be detectable.

A note on EMON a lot of us probably use Outlook or Outlook Express for Internet and not Commercial connectivity - any solution should work on these as well.

Blackspear
July 15th, 2003, 07:34 AM
-{ Quote: "vrf
--------------------------------------------------------------------------------
I know many won't agree with me but I think the best way to avoid getting infected by e-mail is using web-based mail accounts like Yahoo or Hotmail. They have complex professional scanners, no home users have that, so surely they'll stop more viruses than any av for home users. I sometimes received infected emails but I was never infected cause I mostly use web-based mail and if an e-mail was infected, it simply appeared blank, Hotmail disinfected it for me, so it never got into my computer.
" }-

Wrong answer VRF, I have a Hotmail account as well as normal pop3's, got infected by BadTrans through Hotmail, McAfee did NOT pick up the attachement as an infected file, in fact it told me it was clean. I was using another AV at the time, and it also did not pick up Badtrans when I downloaded the file from Hotmail onto my system. After an update my AV picked it up and cleaned my system.

Best way to avoid viruses, Nod32 V2.0 ;D

Cheers ;D

vrf
July 15th, 2003, 08:10 AM
I was talking of my own experience, Hotmail stopped at least 8 infected mails I recieved, until now. I didn't say you can't get infected via Hotmail. Whatever antivirus you are using, whatever measures you are taking, there's absolutely no guarantee your computer will never get infected. There always can be a virus surpassing everything(including Nod32). If you read the Nod32 FAQ's Eset also recognizes that in some rare circumstances, Nod32(like any other av) may miss a virus. Viruses are getting smarter and smarter and sometimes av's cannot immediately cope with all of them. But web mail has many advantages(one of the most obvious is that, when you open your mail box&see a suspicious mail or attachment you simply delete it, without it ever getting into your computer).

worldcitizen
July 15th, 2003, 03:23 PM
As NOD 32 IS the best, why shouldn't everyone know it?? I would like to see Eset keep way ahead of the rest in user friendliness as well as stopping viruses.

It's no good inserting a message at the bottom of an email especially if there's an attachment. People NEED to KNOW that the email has been scanned by a stamp/signature/snazzy graphic in the HEADER. If I get an email from an unknown source and I am not using anti-spam software it would be very reassuring to see 'certified virus free by NOD' in brackets in the header BEFORE I opened the email. That way I could feel confident about opening it.

Dave

Pieter_Arntz
July 15th, 2003, 04:34 PM
Hi Dave,

Don't open attachments that are sent to you by strangers unannounced.
Even if it says they are scanned with NOD, KAV and all the rest.
First: it could be a trick
Second: are the scanners up-to-date
Third: it could be a new virus

Paranoid? Who? Me? :D

Regards,

Pieter

sig
July 15th, 2003, 05:34 PM
Email spam that says it isn't spam is still spam.

Notations in email that certify the email is virus free doesn't make the email virus free.

One shouldn't rely on any such claim or text on emails, even if it's legit and not spoofed. Treat all email as potential security risks until proven otherwise.

Don't trust someone else's AV to do the job either. I''ve received infected emails (that my AV caught) from people who swore their AV was up to date. Trust your own security practices first and then perhaps your AV, but no one's else's. ;)

Kym
July 16th, 2003, 03:44 AM
A lot of people out there have never heard of Nod so therefore would not feel any safer knowing the email had been scanned by Nod and lets face it, if you had never heard of Nod, would you trust a supposed anti-virus program called Nod32. Nod as in nodding off to sleep.
The good part about having the message in the email would be that more people would learn about Nod and then hopefully check it out and then get it, thus making the web a safer place for us all

JayK
July 20th, 2003, 08:10 AM
-{ Quote: " quoting: Blackspear link=board=39;threadid=10929;start=15#msg73536 date=1058268887]

--------------------------------------------------------------------------------


Wrong answer VRF, I have a Hotmail account as well as normal pop3's, got infected by BadTrans through Hotmail, McAfee did NOT pick up the attachement as an infected file, in fact it told me it was clean. I was using another AV at the time, and it also did not pick up Badtrans when I downloaded the file from Hotmail onto my system. After an update my AV picked it up and cleaned my system.

Best way to avoid viruses, Nod32 V2.0 ;D

Cheers ;D
" }-

Wrong Answer. Best way to avoid viruses, use your brain. My Dad isnt some hot shot antivirus expert like you (he can't name any antiviruses), but he has never being infected despite using hotmail

controler
July 20th, 2003, 12:31 PM
You had to make me come here and mention this again didn't you?

I DO use NOD32 version 2.0 also
BUT

here is the senerio again

You have a keylogger on your system.
You allow your default e-mail program ( Outlook ) full access to the internet.
The keylogger makes it timley communication via your e-mail client. The logger does not open a viewable outlook window but is just the same sending the mail.
Your firewall does not kick on.
BUT if you are using Norton and you have enabled the outgoing and incomming splash screen, once the logger trys to send that mail the splash screen WILL kick on. I know this for a fact !!!!!!!!!!!!

Now don't make me mention it again LOL

con