That would really be up to how the mail was generated, and how your
systems are configured. And would logically need to be included in the
project.
An example is the mail setup I have implemented here at Corpex:
+-------------------+
| Internet |
+-------------------+
|
+=============+
| Firewall |
+=============+
|
+----------------+
| External Spool |
+----------------+
|
+============+
| Firewall |
+============+
|
+----------------+
| Internal Spool |
+----------------+
/|\
/ | \
Assorted End-User Mail Servers
(Exchange/AIX-POP/Linux-IMAP)
Looks a little complex doesn't it! But it is reasonably secure and
provides a very efficient mail system. No user accounts exist on our mail
spools, but *ALL* traffic is scanned for viri including:
local->local deliveries
local->internet deliveries
internet->local deliveries
This is different to most of the products that are out there that only
scan local deliveries, not relayed mail. The virus scanning is
implemented on both of the mail spools. For efficiency mail scanned on
one of the spools is able to by-pass scanning on the other.
Before anybody asks - why two firewalls ? Simple. Over 80% of hacks
against sites are internal, so for the sake of due dilligence...
Jason.
On Fri, 12 May 2000, Peter Samuel wrote:
> On Fri, 12 May 2000 [EMAIL PROTECTED] wrote:
>
> >
> > That part already works - and is deceptively easy. Take a look at
> > smtpd...
>
> What about mail injected into the queue - ie it comes from an internal
> source via some program running (for example)
>
> | /usr/lib/sendmail -t
>
> or
>
> | /var/qmail/bin/qmail-inject
>
> I don't think a disinfection regime is complete unless you also
> disinfect messages internally generated.
>
> Regards
> Peter
> ----------
> Peter Samuel [EMAIL PROTECTED]
> Technical Consultant or at present:
> eServ. Pty Ltd [EMAIL PROTECTED]
> Phone: +61 2 9206 3410 Fax: +61 2 9281 1301
>
> "If you kill all your unhappy customers, you'll only have happy ones left"
>
---
Jason Ball
Electronic Commerce Specialist
Corporate Express Australia Ltd
Phone: +61 2 9335 0374 Fax: +61 2 9335 0753
Email: [EMAIL PROTECTED]
--
SLUG - Sydney Linux Users Group Mailing List - http://www.slug.org.au
To unsubscribe send email to [EMAIL PROTECTED] with
unsubscribe in the text
