Re: Re[2]: [Dbmail] Virus message blocking [off-topic]

2004-09-12 Thread David Rebarchik
I use a program called ASSP to filter spam and viruses. It seams to work really well. see http://assp.sourceforge.net for more info. Dave Quoting Jeff Brenton <[EMAIL PROTECTED]>: > Hello Paul, > > >> If you program the MTA to accept-analyze-drop messages, you risk a > >> false positive not bei

Re: [Dbmail] Virus message blocking [off-topic]

2004-09-10 Thread Paul J Stevens
Jeff Brenton wrote: Hello Paul, If you program the MTA to accept-analyze-drop messages, you risk a false positive not being noticed; if the MTA rejects a legitimate message, the sender will not get a report about the error. PJS> What risk of false positives wrt virus-scanning? Are PJS> vi

Re[2]: [Dbmail] Virus message blocking [off-topic]

2004-09-10 Thread Jeff Brenton
Hello Paul, >> If you program the MTA to accept-analyze-drop messages, you risk a >> false positive not being noticed; if the MTA rejects a legitimate >> message, the sender will not get a report about the error. PJS> What risk of false positives wrt virus-scanning? Are PJS> virus-scanner so unre

Re: [Dbmail] Virus message blocking [off-topic]

2004-09-10 Thread Paul J Stevens
Jeff Brenton wrote: With forged return addresses, accept-analyze-bounce allows the virus or worm to spread to the unfortunate person whose return address was forged (Micah, in this case), only it now "originates" from "our" server, instead of the infected machine. Bouncing caught virusses, if

Re: [Dbmail] Virus message blocking [off-topic]

2004-09-10 Thread Christian G. Warden
On Fri, Sep 10, 2004 at 01:21:17PM -0500, Jeff Brenton wrote: > AY> Can you install a virus scanner? Clam Anti-Virus is successfully > AY> blocking all of the virus-infected messages coming from this list > AY> on my MTA. > > A general virus scanner is in the works for our system, but it will > re

Re[2]: [Dbmail] Virus message blocking [off-topic]

2004-09-10 Thread Jeff Brenton
AY> Can you install a virus scanner? Clam Anti-Virus is successfully AY> blocking all of the virus-infected messages coming from this list AY> on my MTA. A general virus scanner is in the works for our system, but it will require that we accept the mail prior to scanning it. I'd rather NOT accept

Re: [Dbmail] Virus message blocking [off-topic]

2004-09-10 Thread Alex Yamauchi
Can you install a virus scanner? Clam Anti-Virus is successfully blocking all of the virus-infected messages coming from this list on my MTA. -- Alex Yamauchi Access Innovations, Inc. e-mail: [EMAIL PROTECTED] phone: (505) 265-3591, ext. 144 fax: (505) 256-1080 > Hello, all - I found a way

Re: [Dbmail] Virus message blocking [off-topic]

2004-09-10 Thread Micah
Thanks I just popped this in on my MTA, and it seems to be helping. -Micah On Friday 10 September 2004 08:51 am, Jeff Brenton wrote: > /^TV..HA.J9x6ptYCMyAUFAI7YB...$ >/i > /^jsD986X8LoBsEhBz55KvrQ4O..VQWCELAwMI$ >

[Dbmail] Virus message blocking [off-topic]

2004-09-10 Thread Jeff Brenton
Hello, all - I found a way to bounce the virus-infected messages that have been hitting this list over the past week from within Postfix. It is actually a rather broad method - we're now blocking ALL messages that include UPX-compressed executable files. After noticing that a lot of virus and worm