>Just an observation here that kind of ties two threads together. Someone
>was commenting earlier about attachments in webmail not be intercepted by
>the AV scanner. I didn't see any mention of the reason (maybe is so obvious
>that everyone thinks everyone already knows it and doesn't want to look
>foolish, but I'll do it - I'm not proud {bg}).
It's not the mistakes you make, it's how you recover from the mistakes. bg
( see my mistake on APOP just this morning )
>The web mail interacts directly with IMail - bypassing all the gateways,
>scanners, etc between it and the mean nasty world out there. Unless
>Ipswitch puts hooks into IMail to support AV scanning, this will be a big
>hole in your defenses.
>
>I don't have any solutions (yet), but I thought I'd throw this out.
yep, that's a hole since the mail is delivered to Imail via http rather
than over the SMTP path.
There's a similar hole when local users send infected mail to IMail directly.
If Imail and local users send all their outgoing mail through the AV
machine, then at least outgoing mail is cleaned. This keeps your site from
sending infected mail to internet. And this includes mail from local Imail
users to the AV machine then to local Imail users. And still no need to
have Imail support AV directly.
The hole that an external AV scanner can't plug is HTTP mail to local Imail
users, since that remains completely within the Imail box.
Len
Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.
