I usually have my Mailscanner setup in the usual manner. However,
Occasionally I'll add a sendmail rule to block certain headers, or
certain froms. It usually only has to be in there a day or two until
people figure out how to work their virus scanners.
Tks,
Jeff Bailey
On Tue, 2003-10-07 at 17:58, [EMAIL PROTECTED] wrote:
> imho
>
> I may be mistaken, but I believe the messages referred to are
> generated by a
> virus/worm. If this is the case, the "correct" (again, imho) place to
> handle
> this would be as your are scanning the messages, not at the MTA level
> *unless* the mail server is on a slow link or does not have the
> resources
> necessary for the load -or- the load in that particular case justifies
> blocking at the MTA level (or firewall, border routers, etc.)
>
> We block(ed) sobig at the MTA level, but we let MailScanner/Sophos
> handle
> most of the other virus/worm generated traffic.
>
> I guess this also depends if you have multiple servers with different
> functions as well.
>
> I am sure there are many possibilites that are "correct" in any given
> situation. How do most of you decide?
>
> Youn Gonzales
> System Administrator
> Comptia A+, Network+, INET+,
> Cisco CCNA/CCDA Certified Technician
> Microsoft Certified Professional
>
> I have an existential map; it has you are here written all over it.
> - Steven Wright
>
> ----- Original Message -----
> From: "Jeff Bailey" <[EMAIL PROTECTED]>
> To: <[EMAIL PROTECTED]>
> Cc: <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]>
> Sent: Tuesday, October 07, 2003 3:40 PM
> Subject: RE: [Razor-users] Help! I'm getting over 20MB of Spam a day!
> {Scanned by HJMS}
>
>
> > Bah Jeff. Think *then* post. You said mailscanner, not spamassassin.
> > Sorry. =)
> >
> > On Tue, 2003-10-07 at 14:50, [EMAIL PROTECTED] wrote:
> > > Um, the concept is correct - you'll be better off if you can block
> at
> > > the
> > > MTA level - but the implementation recommended doesn't do that.
> > > MailScanner
> > > only touches messages *after* they've been accepted by the MTA. A
> > > milter-based tool, such as MimeDefang, will hook into the MTA to
> allow
> > > rejection of the message before it's accepted in many cases, and
> > > before it's
> > > written to disk in most cases. I think MailScanner is great - I
> use it
> > > -
> > > but it doesn't work at the MTA level.
> > > _______________________________________________
> > > Razor-users mailing list
> > > [EMAIL PROTECTED]
> > > https://lists.sourceforge.net/lists/listinfo/razor-users
> >
> >
> >
> > -------------------------------------------------------
> > This sf.net email is sponsored by:ThinkGeek
> > Welcome to geek heaven.
> > http://thinkgeek.com/sf
> > _______________________________________________
> > Razor-users mailing list
> > [EMAIL PROTECTED]
> > https://lists.sourceforge.net/lists/listinfo/razor-users
> >
>
>
>
>
> -------------------------------------------------------
> This sf.net email is sponsored by:ThinkGeek
> Welcome to geek heaven.
> http://thinkgeek.com/sf
> _______________________________________________
> Razor-users mailing list
> [EMAIL PROTECTED]
> https://lists.sourceforge.net/lists/listinfo/razor-users
-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Razor-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/razor-users
