Dennis Peterson wrote:
John Kielkopf said:
Dennis Peterson wrote:
Bill Shupp said:
Thanks for the quick response.
Fajar A. Nugraha wrote:
Are you scanning all email?
Not outgoing mail (from our users), but all incoming mail, yes.
Don't you think it a bit rude to require all of us to scan your user's
mail for you?
For those that scan outgoing, how much has your outgoing filter actually
caught?
I currently do scan outgoing but often wonder if it's worth the effort,
since it's never caught a single virus.
All mail-borne viruses were outgoing from somewhere but unscanned or
unsuccessfully scanned. It's very much worth the effort, what ever that
means. It is no sweat to me to scan them - I barely know it's happening as
it's all automated. I'm only seeing a million messages a week so I'm not
the largest shop on the net, but we do see outgoing viruses. Not only
that, but we trap a lot of outgoing spam, too. If we wouldn't accept it
why would we send it?
What I mean by "effort" is load on the mail server and/or scanner.
Email worms shouldn't be able to authenticate for SMTP, so unless you
run an open relay or transparent proxy, these types of virus shouldn't
be sent through your server. The only type left are those inadvertently
(infected word doc, etc.) or intentionally attached by one of your
users... While I have yet to see one of my users send a virus in this
way, I was curious how many others have seen.
BTW, gathering a list of those who do not scan outgoing is very helpful
for the rest of us as it makes blacklisting them sooo easy. Thanks for
helping.
I fail to see your point. My question was directed at those that, like
myself, do scan outgoing mail. It’s likely not going to aid in bloating
your blacklist.
_______________________________________________
http://lurker.clamav.net/list/clamav-users.html
