Hi
my question was i run sendmail server configured with smtp-= auth. Is there any way where i can filter the mails or discard the mails ha ving infected attachments.
On Sat, 06 Nov 2004 Devdas B= hagat wrote :
On 06/11/04 08:23 -0000, Mangesh V Rakhunde wrote:<= BR>
I
run a mail server i.e sendmail o configured = SMTP auth.
&= nbsp; My problem is mails. Many machines in and t= hey
just send infected mail server itself.
Plea= se send in plain text, wrapping the lines at 76 characters,
or less.
= >
From what I can understand, you have PCs infected by vi= ruses
which are
directly sending mail out, and getting your exter= nal IP
blacklisted.
The correct solution to this is to= implement a packet filter
which
blocks port 25 outbound, and ens= ures that outbound connections
come only
from your real outbound= MTA.
The logs from this packet filtering firewall wil= l also tell you
which
systems are infected by viruses.
Devdas Bhagat
--
http://mm.ilug-b= om.org.in/mailman/listinfo/linuxers
[1] []
References
On 06/11/04 15:15 -0000, Mangesh V Rakhunde wrote:
Hi my question was i run sendmail server configured with smtp-auth. Is there any way where i can filter the mails or discard the mails having infected attachments.
Do not top post. Do wrap lines at 76 characters or less.
If you wish to filter mail with viruses that actually hits your server, then amavisd-new is a good choice, as is sendmail milter (clamav-milter works).
However, if this is a LAN scenario, keep in mind that viruses do not send via the regular SMTP servers, but use their own builtin SMTP engine instead. This means that filtering for these on your outbound gateway is useless.
Devdas Bhagat
-
Devdas Bhagat -
Mangesh V Rakhunde