[IMGate] Question new virus... sober

Has anyone figured out how to stop this at the IMGate? I'm running CLAM AV and it hasn't stopped one of these yet :( I got 196 (the highest number yet) sober stopped at my IMail server antivirus just yesterday. Christopher Checca Packard Transport, Inc. IT Department 24021 South Municipal Dr

[IMGate] Re: Question new virus... sober

hitting my IMail server's antivirus, all other viruses are stopped at the IMGate. Christopher Checca Packard Transport, Inc. IT Department 24021 South Municipal Dr PO Box 380 Channahon, IL. 60410 815 467 9260 815 467 6939 Fax [EMAIL PROTECTED] www.packardtransport.com -Original Message

[IMGate] Re: Question new virus... sober

ClamAV devel-20041102/605/Wed Nov 24 08:09:47 2004 Christopher Checca Packard Transport, Inc. IT Department 24021 South Municipal Dr PO Box 380 Channahon, IL. 60410 815 467 9260 815 467 6939 Fax [EMAIL PROTECTED] www.packardtransport.com =20 -Original Message- From: [EMAIL PROTECTED

[IMGate] Re: Question new virus... sober

have one bad = program doesn't know how to keep two years open at the same time, so we really = have to close 2004 before anyone can do 2005 business, it SUCKS!) Christopher Checca Packard Transport, Inc. IT Department 24021 South Municipal Dr PO Box 380 Channahon, IL. 60410 815 467 9260 815 467

[IMGate] Re: New Virus Attack Technique Bypasses Filters

I've been blocking .rar files for about two years, as I've seen no true = need in our office for that file type. Also I can't ever remember getting an request to receive an override for this file type either. Christopher Checca Packard Transport, Inc. IT Department 24021 South Municipal Dr PO

[IMGate] Re: Just in case you felt like relaxing....

and 4 percent of the recipients have bought something advertised = through spam within the past year. That's just great :/really helps the cause. Christopher Checca Packard Transport, Inc. IT Department 24021 South Municipal Dr PO Box 380 Channahon, IL. 60410 815 467 9260 815 467 6939 Fax

[IMGate] Re: Just in case you felt like relaxing....

I would love to see that ... but I think the only way it will get done = is if someone releases an virus or series of viruses that would cause the disruption. IMO an attack from legitimate MX's would cause a reverse = attack from their zombies. Something I can't afford to take on. Christopher

[IMGate] CLAM AV FYI...

CLAM AV is now on 0.83 any one still running versions before 0.80 should think about updating. You can check to see if your are at 0.80 or better by typing freshclam ... you will get an error about you current level if your not at 0.80 or better. Christopher Checca Packard Transport, Inc

[IMGate] OT: CLAM AV FYI...

But check their web site, I'm not the greatest FreeBSD admin. Christopher Checca Packard Transport, Inc. IT Department 24021 South Municipal Dr PO Box 380 Channahon, IL. 60410 815 467 9260 815 467 6939 Fax [EMAIL PROTECTED] www.packardtransport.com -Original Message- From: [EMAIL

[IMGate] Re: OT: CLAM AV FYI...

Just because it's unix is no reason not to reboot and it doesn't hurt. Now we are wayyy OT ... sorry Len :) Christopher Checca Packard Transport, Inc. IT Department 24021 South Municipal Dr PO Box 380 Channahon, IL. 60410 815 467 9260 815 467 6939 Fax [EMAIL PROTECTED

[IMGate] Re: OT: CLAM AV FYI...

level. =20 Again sorry Len for the WAYOT. Christopher Checca Packard Transport, Inc. IT Department 24021 South Municipal Dr PO Box 380 Channahon, IL. 60410 815 467 9260 815 467 6939 Fax [EMAIL PROTECTED] www.packardtransport.com =20

[IMGate] Re: Stop email alerts from IMGate...

Thanks ... I looked at that, but wasn't sure it was what I needed. Christopher Checca Packard Transport, Inc. IT Department 24021 South Municipal Dr PO Box 380 Channahon, IL. 60410 815 467 9260 815 467 6939 Fax [EMAIL PROTECTED] www.packardtransport.com =20 -Original Message- From

[IMGate] Re: Greylisting

Thanks, Christopher Checca Packard Transport, Inc. IT Department 24021 South Municipal Dr PO Box 380 Channahon, IL. 60410 815 467 9260 815 467 6939 Fax [EMAIL PROTECTED] www.packardtransport.com =20 -Original Message- From: [EMAIL PROTECTED] = [mailto:[EMAIL PROTECTED] On Behalf Of Len

[IMGate] Re: Signed up for the spf stuff

to anyone that could pass the M$ tests and could get cheap highspeed access for cheap. They aren't many true professionals in the IT field anymore ... again IMO ... it's really sad. ---off the soap box--- Christopher Checca Packard Transport, Inc. IT Department 24021 South Municipal Dr PO Box 380

[IMGate] FYI... CLAMAV 0.84 released...

Just a note to those that are running CLAM AV; CLAM anti-virus has release 0.84 ... I've updated my IMGate server last = week and its running fine. Christopher Checca Packard Transport, Inc. IT Department 24021 South Municipal Dr PO Box 380 Channahon, IL. 60410 815 467 9260 815 467 6939 Fax

[IMGate] Re: (No In-Reply-To: 001501c555a1$ce30fde0$4501a8c0@MARK

Could be either... Christopher Checca Packard Transport, Inc. IT Department 24021 South Municipal Dr PO Box 380 Channahon, IL. 60410 815 467 9260 815 467 6939 Fax [EMAIL PROTECTED] www.packardtransport.com =20 -Original Message- From: [EMAIL PROTECTED] = [mailto:[EMAIL PROTECTED

[IMGate] Len ... has anyone heard from him?

Lenyou out there? Christopher Checca Packard Transport, Inc. IT Department 24021 South Municipal Dr PO Box 380 Channahon, IL. 60410 815 467 9260 815 467 6939 Fax [EMAIL PROTECTED] www.packardtransport.com

[IMGate] Re: getting tarpitted and killed

Sounds like we need some time of SAV timeout /or auto black list for these subnets. Christopher Checca Packard Transport, Inc. IT Department 24021 South Municipal Dr PO Box 380 Channahon, IL. 60410 815 467 9260 815 467 6939 Fax [EMAIL PROTECTED] www.packardtransport.com -Original Message

[IMGate] Re: getting tarpitted and killed

H ... will need to take some time to think about this. My first reaction is to set an maximum SMTP session timer, but they may have = other side effects. Christopher Checca Packard Transport, Inc. IT Department 24021 South Municipal Dr PO Box 380 Channahon, IL. 60410 815 467 9260 815 467

[IMGate] CLAM AV on IMGate?

How many people think it's helped them by adding CLAM AV to their IMGate setup? Or does this just add to much processing to the IMGate server and better to catch them down stream after them IMGate? Christopher Checca Packard Transport, Inc. IT Department 24021 South Municipal Dr PO Box 380

[IMGate] Re: CLAM AV on IMGate?

Thanks everyone Christopher Checca Packard Transport, Inc. IT Department 24021 South Municipal Dr PO Box 380 Channahon, IL. 60410 815 467 9260 815 467 6939 Fax [EMAIL PROTECTED] www.packardtransport.com

[IMGate] starting amavisd getting this error ... what am i doing wrong?

. Christopher Checca Packard Transport, Inc. IT Department 24021 South Municipal Dr PO Box 380 Channahon, IL. 60410 815 467 9260 815 467 6939 Fax [EMAIL PROTECTED] www.packardtransport.com

[IMGate] How do I whitelist this helo?

554 banana2.grizella.com[65.125.145.225]: Client host rejected: The sending IP is not authorized to send MAIL FROM: @sender.domain, PTR = banana2.grizella.com (in reply to RCPT TO command) How should I white list this server? Christopher Checca Packard Transport, Inc. IT Department 24021

[IMGate] Re: How do I whitelist this helo? (Zaep Key: 8c65c8b8.438f79b5.0c420be7)

How about removing this guy from the list?? Christopher Checca Packard Transport, Inc. IT Department 24021 South Municipal Dr PO Box 380 Channahon, IL. 60410 815 467 9260 815 467 6939 Fax [EMAIL PROTECTED] www.packardtransport.com -Original Message- From: [EMAIL PROTECTED] [mailto

[IMGate] Re: How do I whitelist this helo?

it for hotmail as it's forged way too much). I've talked to = them about this issue and how they need to fix it ... in the mean time I need = to white list this one IP/MTA so we can get their orders. Christopher Checca Packard Transport, Inc. IT Department 24021 South Municipal Dr PO Box 380 Channahon, IL

[IMGate] Re: hotmail, again

.hotmail.com 1 mx4.hotmail.com 1 mailgw.qvcmail.com total sent: 54 7474k 1.2 m 10.5 m hotmail.com Christopher Checca Packard Transport, Inc. IT Department 24021 South Municipal Dr PO Box 380 Channahon, IL. 60410 815 467 9260 815 467 6939 Fax [EMAIL PROTECTED] www.packardtransport.com

[IMGate] Question...

IMGate has done such a good job at blocking = spam they are just leaving me alone overall?? Or am I having wishful thinking = and the tidal wave is just round the coroner? Christopher Checca Packard Transport, Inc. IT Department 24021 South Municipal Dr PO Box 380 Channahon, IL. 60410 815 467 9260

[IMGate] Re: Virus getting past IMGate?

but was putting it out there to see if anyone else has ... I have a bad feeling that this virus will be the next big one, my guess is next week when people return to the office I will see a lot more of these. Christopher Checca Packard Transport, Inc. IT Department 24021 South Municipal Dr PO Box

[IMGate] Re: What are you throughputs of amavis/spamassassin/clamav ?

I went with: http://memberwebs.com/nielsen/software/clamsmtp/ on the IMGate machine and it's the last rule in the IMGate config. From the last five days... Scanned by ClamAVSMTPd 11664 Since it's the last rule ... there's not much mail left to scan. Christopher Checca Packard Transport, Inc

[IMGate] Re: Suggestions

quite over the past few weeks for my mail server ... knocking on wood. Christopher Checca Packard Transport, Inc. IT Department 24021 South Municipal Dr PO Box 380 Channahon, IL. 60410 815 467 9260 815 467 6939 Fax [EMAIL PROTECTED] www.packardtransport.com -Original Message- From

[IMGate] Re: Exporting users from Imail or SmarterMail and putting them to the Imgate box

Is relays.visi.com down? Christopher Checca Packard Transport, Inc. IT Department 24021 South Municipal Dr PO Box 380 Channahon, IL. 60410 815 467 9260 815 467 6939 Fax [EMAIL PROTECTED] www.packardtransport.com

[IMGate] looking for a rule...

I need to block all windows video formats at the IMGate ... any ideas on what file to use and the format? Christopher Checca Packard Transport, Inc. IT Department 24021 South Municipal Dr PO Box 380 Channahon, IL. 60410 815 467 9260 815 467 6939 Fax [EMAIL PROTECTED] www.packardtransport.com

[IMGate] Re: looking for a rule...

Thanks! Christopher Checca Packard Transport, Inc. IT Department 24021 South Municipal Dr PO Box 380 Channahon, IL. 60410 815 467 9260 815 467 6939 Fax [EMAIL PROTECTED] www.packardtransport.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Len Conrad

[IMGate] Question: Deleting emails with blank subject lines...

.Also where would = you go about making this change? Thanks, Christopher Checca Packard Transport, Inc. IT Department 24021 South Municipal Dr PO Box 380 Channahon, IL. 60410 815 467 9260 815 467 6939 Fax [EMAIL PROTECTED] www.packardtransport.com

[IMGate] Re: Question: Deleting emails with blank subject lines...

it on IMGate = acceptably. In header_checks, I would REJECT rather than DISCARD, and perhaps run=20 WARN for a couple days to see how it goes, as always. /^subject: $/ REJECT Rejected because Subject: is empty. ... so legit senders will understand clearly. Len Thanks, Christopher Checca

[IMGate] Re: Clearing databases...

are very good at blocking thanks for your help Christopher Checca Packard Transport, Inc. IT Department 24021 South Municipal Dr PO Box 380 Channahon, IL. 60410 815 467 9260 815 467 6939 Fax [EMAIL PROTECTED] www.packardtransport.com

[IMGate] Re: imail real name vulnerabilty filter

Did this work for you? Christopher Checca Packard Transport, Inc. IT Department 24021 South Municipal Dr PO Box 380 Channahon, IL. 60410 815 467 9260 815 467 6939 Fax [EMAIL PROTECTED] www.packardtransport.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED

[IMGate] Re: periodic update: show us your RBL servers

whitelist them and then switch to reject mode for the rest. You may not see much help from dul RBL if you're running greylist before the dul. Len thanks Christopher Checca Packard Transport, Inc. IT Department 24021 South Municipal Dr PO Box 380 Channahon, IL. 60410 815 467 9260 815 467 6939 Fax

[IMGate] Re: gif image spam dropped off?

Hmmm ... the number of total spam messages on my systems is up 22.4% over last week. But most seam to be stopped by greylisting, Sender address rejected undeliverable address and Sender address rejected unverified address. Christopher Checca Packard Transport, Inc. IT Department 24021 South

[IMGate] Re: Fwd: FYI: ordb.org is dead

Thanks for the update. Christopher Checca Packard Transport, Inc. IT Department 24021 South Municipal Dr PO Box 380 Channahon, IL. 60410 815 467 9260 815 467 6939 Fax [EMAIL PROTECTED] www.packardtransport.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED

[IMGate] Re: strange virus stats

Been very quiet here ... like you only 3 to 5 a day without seeing an increase in months. Christopher Checca Packard Transport, Inc. IT Department 24021 South Municipal Dr PO Box 380 Channahon, IL. 60410 815 467 9260 815 467 6939 Fax [EMAIL PROTECTED] www.packardtransport.com -Original

[IMGate] Re: OT: Looking for a good Howto on integrating Antivirus with IMGate

Try http://memberwebs.com/stef/software/clamsmtp/ Easy, quick, and it works. Christopher Checca Checca.net 815 603 3182 435 608 3182 fax [EMAIL PROTECTED] www.checca.net -Original Message- From: [EMAIL PROTECTED] = [mailto:[EMAIL PROTECTED] On Behalf Of Kevin Coveney Sent: Monday, June

[IMGate] Re: Serious Flaw Kills Bind 8 Domain Server Software

Do you really think this would effect the IMGate setup? Christopher Checca Packard Transport, Inc. 24021 South Municipal Dr PO Box 380 Channahon, IL. 60410 815 467 9260 815 467 6939 Fax [EMAIL PROTECTED] www.packardtransport.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL

[IMGate] postgrey_exceptions.map

Any have a newer postgrey_exceptions.map? Mine is from 12/2005 ... I'm sure there have been updates since then. Christopher Checca Packard Transport, Inc. 24021 South Municipal Dr PO Box 380 Channahon, IL. 60410 815 467 9260 815 467 6939 Fax [EMAIL PROTECTED] www.packardtransport.com

[IMGate] Re: postgrey_exceptions.map

Nobody willing to post their map? Christopher Checca Packard Transport, Inc. 24021 South Municipal Dr PO Box 380 Channahon, IL. 60410 815 467 9260 815 467 6939 Fax [EMAIL PROTECTED] www.packardtransport.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf

[IMGate] Re: postgrey_exceptions.map

I'm seeing a lot of the airlines (southwest as of yesterday), getting stopped by the greylisting ... I think it's their automatic reservation system. Christopher Checca Packard Transport, Inc. 24021 South Municipal Dr PO Box 380 Channahon, IL. 60410 815 467 9260 815 467 6939 Fax [EMAIL PROTECTED

[IMGate] Re: Restrict a accepting SMTP connections

Have postfix(clam) run under a different port ... something really different. Christopher Checca Packard Transport, Inc. 24021 South Municipal Dr PO Box 380 Channahon, IL. 60410 815 467 9260 815 467 6939 Fax [EMAIL PROTECTED] www.packardtransport.com -Original Message- From: [EMAIL

[IMGate] Re: need list of RBL

, reject_rbl_client zombie.dnsbl.sorbs.net, reject_rhsbl_sender dsn.rfc-ignorant.org, reject_rhsbl_client rhsbl.sorbs.net, reject_rhsbl_sender rhsbl.sorbs.net, Christopher Checca Packard Transport, Inc. 24021 South Municipal Dr PO Box 380 Channahon, IL. 60410 815 467 9260 815 467 6939