Yeah, I'll say it - we use Declude on the Imail server in addition to an antivirus gateway. Once in a blue moon, the Declude catches an infected email that the gateway misses. To us, the possibility of one virus let in is worth the extra layer of AV protection. And of course declude scans all internal email. Finally, the F-Prot on the Imail/Declude machine offers another opinion on inbound mail - In case the McAfee e250s don't have an up-to-the-minute definition, and the F-Prot does, or vice versa.
We also require safe content types on our gateway, and the proxy also checks for mail anomalies. If all else fails, the fourth line of defense for us is Trend Officescan on the desktop. If an email virus gets through all this (overkill), I'll be forced to eat my hat. Ron Sokol Network Analyst City of Salem, VA [EMAIL PROTECTED] 540-375-3099 -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry Sent: Tuesday, October 05, 2004 9:14 AM To: [EMAIL PROTECTED] Subject: Re: [IMail Forum] need help directing mail to av server >I am using Symantec Antivirus for SMTP Gateways as a front end. I have the >SMTP setting for Imail set to send all remote mail to remote gateway. What >I need is a way to have all mail generated from inside my organization >(cconnect.net) that is destined to my organization, ie inside mail, to be >sent through the same antivirus gateway. I figured someone one this list >has already figured this one out. It isn't possible. Think about it: If you send E-mail from user1 to user2 on the IMail server, and it *does* go to the Symantec gateway, what will the Symantec gateway do? It will send the scanned E-mail to the IMail server. What does the IMail server then do? Since it is to a local user, it sends it to the Symantec gateway, just like you wanted. You've then got a mail loop. What you really are looking for is a way for local-to-local E-mail sent from the IMail server to be sent to the gateway, *unless* there is some indication that it has been scanned. In your case, the best option (without mentioning third party solutions! <G>) would be to [1] Tell users to send their outgoing E-mail (which includes internal E-mail) through the Symantec gateway, and then [2] Set up IMail to only allow connections from the Symantec gateway. This wouldn't scan web messaging E-mail, but I believe it's as close as you can get to what you want, without other third party solutions. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail scanned for viruses by Declude Virus] To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
