Since you are using postfix you can also use body checks to just reject it at
the MTA level. I did this for sobig, mydoom and a couple others. They will be
completely denied and thus they will never make it to the exchange server.
Gary Smith
-----Original Message-----
From: Bill Randle [mailto:[EMAIL PROTECTED]
Sent: Tue 2/17/2004 11:25 AM
To: Martin Lyberg
Cc: '[EMAIL PROTECTED]'
Subject: Re: Bagle.B virus
Martin Lyberg wrote:
>Hi,
>
>Since a few hours back i'm recieving mails containing the new Bagle.B
virus.
>I'm using a RH9 box with Postfix and SA and relaying mail for a
Exchange 5.5
>mailserver.
>
>The virusmail is spoofing our adressess. Virusmails are recieved from a
>infected computer somewhere in the world. But the sender and recipient
are
>users in our directory.
>
>How can i reject these messages before they're relayed to our
>Exchangeserver?
>
>
Install ClamAV anti-virus software on the RH box. I use amavisd-new with
Postfix
to integrate virus scanning and spam filtering. Works great!
-Bill
