Re: OE/virus query..ps I fogotted summat

"Ali" <ali_on_usenet@xxxxxxxxxxxx> wrote in message
news:Xns974DC4A93C0B2314159265358@xxxxxxxxxxxxxx
> On Mon, 16 Jan 2006 17:00:07 GMT, pmj commented
>> "ray" <datasmog@xxxxxxxxxxx> wrote in message
>> news:1h9947k.1liupd142x90jN%datasmog@xxxxxxxxxxxxxx
>>> pmj <post@xxxxxxxxxxxxxxxxxxxxx> wrote:
>>>>
>>>> & *also*, incidentally (& possibly crucially) it goes through
>>>> the AVG Proxy Mail Server, on the Recipient's Machine
>>>
>>> Does it??
>>
>> Yes.
>>
>> The AVG Anti Virus thingy (& also, I think things such as Norton
>> & Avast etc,) act as a "Proxy Mail Server".
>>
>> The User's Mail Client - whether it's something like OutLook Express
>> or Eudora, Thunderbird, Mozilla, MailWasher or whatever - collects
>> (& Sends) the Mail (from & to the Remote Mail Server) *via* the Anti
>> Virus Proxy Server.
>
> That surely depend on how the client ( and proxy server) are set up?

Yes.
But the *Default* Settings for the AVG Anti Virus thingy, is that
it Sets *itself* up (in the Operating System) as a "Transparent
Proxy Server", for both SMTP & POP3 Mail...

& it doesn't matter what is Set (as the Mail Server) in the Mail
*Client* - Mailwasher or OutLook Express or Thunderbird/Mozilla
or whatever...

The Mail Client issues a Connection Request, to the *Operating
System*, asking it to Connect to the Mail Server...
& the *Operating System* then looks in its list of stuff in the
TCP/IP Stack/Chain & ses that the AVG Anti Virus thing has Set
itself as a Proxy Server, so windoze then passes the Connection
Request ti the AVG Proxy Server, which then takes the Request & passes
it on to the (Remote) Mail Server.

Yes - I was a little bit surprised when I found out that it works
that way!
But I have checked on several different peoples Systems & yes,
that's how it does it.

& I think (if I recall right) that even if you try to use something
like Telnet, to Connect (directly?) to the Mail Server, with the AVG
thing Running (with its Default Settings), the Connection (from Telnet)
*still* actually goes through it!

I'd appreciate any further Info &/or Corrections on that point,
from anybody who uses AVG, with it Set up in the normal way.

What happens (what do you/they see), when you try these Links,
for example...

telnet://pop.freeserve.com:110
telnet://mail.plus.net:110
telnet://pop.tiscali.co.uk:110

You *should* see a "+OK" Response ("Greeting") from the Mail Server
& if the AVG thingy is acting as (has Set itself as) an intermediate
Proxy Server, then you will actually see the "Greeting" from the
*AVG* Proxy Server!

<snip>
>> The idea of things such as MailWasher is so that the Mail can be
>> checked (*looked* at) safely, in Plain Text, *before* then being
>> fetched by a normal eMail Client.
>
> I thought the idea was to delete the unwanted stuff, mainly
> automatically, without downloading the bodies at all.

Well, it *can* be done Automatically - & often is, but can *also*
be done with a ceratin amount of User Intervention/Input.

& it (MailWasher) can also download (part or all of) the Bodies
of the Mails (as well as just the Headers of them), so as to do the
Checking - ity has facilities for Setting & Defining Rules that check
the Body Contents as well, not just the actual Headers.

>> The Mail (either just the Headers or the Body as well, depending
>> on the Settings in the Mail Client - Mail Washer) still has to
>> come from the Remote Mail Server to the Machine.
>> & it does that *through* the Proxy Server, which checks it on
>> the way.
>
> Again, that depends on the settings in the client and proxy.

Well I see what you mean (& I also would have thought that)...
But I have seen (& *conclusively* found) that AVG Sets itself
(unless Set otherwise) to work as a "Transparent Proxy Server".

& it doen't matter what is Set (as the Server Name, in the Mail
Client) - it *still* goes through the AVG thing!!!

> I don't know about anyone else, but I check my mails for
> spam/viruses/other unwanted stuff using Magic Mail Monitor
> *without* going through an antivirus proxy mail server.

But then you don't use AVG, which Sets itself up as a "Transparent
Proxy Server", do you?

>... I had to point MMM back to the real POP servers to do it,

Yes, you may well be able to do that (in the Mail Client),
when using a different Anti Virus thing, which works as a
different sort of Proxy Server...

But with AVG, it doesn't matter what is Set in the Mail Client - you
have to Set the Options in the AVG thing itself to not act as a
transparent Proxy Server.

> but letting Avast check for viruses first was rather defeating
> the point of only downloading headers then deleting from the server,

Well, some people may find it a useful, re-assuring way to do it?

> not to mention taking an annoying amount of time over it.

Yes, that can sometimes be a prob as well.

--
pmj


.

Relevant Pages

  • Re: Break off update services
    ... as the one customer of mine with SBS 2003 Premium and AVG does not have any such issues. ... Further, this is a complex network with two branch offices, all of which use the SBS as the inet gateway and update from the SBS server, not AVG's internet site. ... and ISA Server in the instance of SQL which is provided. ...
    (microsoft.public.windows.server.sbs)
  • Re: SBS 2003 R2 Loss of Internet
    ... It was "AVG" SBS Edition causing the problem. ... I used the repair tool but it ... I just checked ipconfig from both the server and client all look exactly ... I will try it after the clients go home for the ...
    (microsoft.public.windows.server.sbs)
  • Re: Dare I ask an avg 8 question? Latest, its sorted :-) (was: Dare I ask an avg 8 question?)
    ... error message that says AVG cannot send from this address ... server, so I can't compare with mine. ... The smtp port is set to 25. ...
    (uk.people.silversurfers)
  • Re: Cant send: error message 0x800CCC6F
    ... Reinstall AVG Anti-Virus using a fresh download, this time opting for a CUSTOM install. ... The server works if I access it through my ISP's webmail service. ...
    (microsoft.public.windows.inetexplorer.ie6_outlookexpress)
  • [REVS] NTLM HTTP Authentication is Insecure By Design
    ... in front of a web server, and that proxy server shares a single TCP ... These are attacks that make use of non-RFC HTTP requests (HTTP Request ... the authentication is associated with the ...
    (Securiteam)