On Wed, 21 Feb 2007 10:56:50 -0700, Darren Spruell wrote > IMHO you're trying to find a technical solution to a bigger problem. > Consider limiting the size of attachments that go through your email > gateway; SMTP isn't an efficient protocol for bulk file transfers, > and like you've found out your CPU and I/O-heavy filtering applications > don't work well with it. Organizations commonly limit the size to 10 > MB or under; anything larger you can find an alternate (more > suitable) method for file transfer (SFTP, or FTP if not sensitive > come to mind.) For internal-only use a file server can be useful for > this.
The guy above is right. Since you haven't given a lot of details, I'll make a few assumptions in this reply. If your users are Windows workstations using Outlook, consider: 1. Use fetchmail to retrieve the email from the isp and set up pop mail so that your users can download their email to their machines. Pop has the advantage of not filling up your email server with files. People tend to use email for everything, including file storage which is not what email was designed for. The disadvantage to pop is that users can't go home or go on someone else's computer to look at their email. 2. Install Clamwin on each machine and remove clam from the server. Better yet, if your company can afford it, use symantec norton anti-virus. 3. If your company can afford it, have them get a static ip and setup your own openbsd 4.0 mail server with pop mail. With this configuration, you won't have to install any 3rd party software. Use the default sendmail, it requires very little configuration. Use the default spamd for greylisting and spam trap, again very little configuration. Use default popa3d, I must repeat, little configuration. With this easy setup, I get about 3 or 4 spams a week considering my email address is on the misc@openbsd.org mailing list. Spammers like to gather email addresses from mailing list to send spam too. If that's all I'm getting is 3 or 4 spam a week, that greatly lessens the burden on any antivirus and spam blocking implementation I choose.
