On Wed, Sep 03, 2003 at 02:17:59PM -0700, Bob Taylor wrote:I have a friend who administers a Red Hat 7.2 server for a small ISP. She wants to refuse all email with .exe, .plf and scr attachments. I've seen automated rejection messages and know it is being done. Could someone please email me with directions on how to do this? It would be very appreciated! The server is currently running stock RH7.2 with current updates.
Whatever solution you find, I hope you realize that many viruses forge the FROM info, and rejecting back to that address is ludicrous, and is highly annoying to have a mailbox full of that stuff.
Excellent article on this topic:
<http://www.oreillynet.com/cs/weblog/view/wlg/3682>
Excellent (IMHO) filtering package, the Sanitizer, which passes the test mentioned in that article, and which protected my company from SoBig, Klez, Goner, and BadTrans without prior knowledge of those worms:
<http://www.impsec.org/email-tools/procmail-security.html>
I frequently get alerts from The Sanitizer that it detected a virus, but "notification was not supported by 'Received' path," that is, it couldn't match the From address to any documented source of the email, so it didn't send an alert.
pjm
-- redhat-list mailing list unsubscribe mailto:[EMAIL PROTECTED] https://www.redhat.com/mailman/listinfo/redhat-list