Barring the banning of Windows, you can use qmail-scanner to ban the attachment types that present the greatest hazard. I know a shop where they do that with procmail and don't bother running antivirus software on the server. They have had great success with this. While I wouldn't be completely comfortable in not running a virus scanner on the attachments I can't ban, it is powerful method of reducing your risk due to delays between virii entering the wild and the release (and download) of their signatures.
Philip Philip Chase * [EMAIL PROTECTED] * 352-392-0965 University of Florida, College of Health Professions >>> Jason Haar <[EMAIL PROTECTED]> 09/18/02 07:25PM >>> On Wed, Sep 18, 2002 at 09:38:26PM +0100, Steve Crowder wrote: > You might want to investigate writing a script that responds to a vendor > announcing the availability of a new "ide" or "dat" file or whatever they > may be calling it. OK the various vendors all have different lead times in I've thought about that too, but the reality is that all antivirus systems are *REACTIVE*. As such, all AV vendors will only release new pattern files AFTER a virus/trojan is seen in the wild. As such, there will always be a chance that your site receives the virus before any update is created. The best solution is to stop users running windows :-) -- Cheers Jason Haar Information Security Manager, Trimble Navigation Ltd. Phone: +64 3 9635 377 Fax: +64 3 9635 417 PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB FE1D 66D1 ------------------------------------------------------- This SF.NET email is sponsored by: AMD - Your access to the experts on Hammer Technology! Open Source & Linux Developers, register now for the AMD Developer Symposium. Code: EX8664 http://www.developwithamd.com/developerlab _______________________________________________ Qmail-scanner-general mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general ------------------------------------------------------- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf _______________________________________________ Qmail-scanner-general mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general
