-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Pete said: > > Hi All : > > Excellent pinguin promotion weather outthere : -32 and a lot of > virusses... > > I guess most of you (Sys-Admins) will be pretty busy right now to clean up the mess. > (So I don't expect an answer immediately) > My question (as a hobby Sys-Admin @ home) what do you guys do in a situation like this ? > > My qmail server get spammed by 'undeliverable messages', > as it is just a 'family' server I have shut it down. > But is that the best solution ? > What else can you do ? > And what do you do when you are responsible for a corporate mail server and need to keep the thing going?
Run antivirus on your mail servers. I run Amavis-new / McAfee / SpamAssassin on the corporate mail servers I look after. If the sysadmin has done his job properly, the virus would never reach the desktop before it got caught (most of the time). I say most of the time because in some situations, the virus can hit before virus definitions are available (Antivirus is only useful when the program knows about the virus in question, and yes I know about Heuristics and yes it's pretty much useless :). To give you an idea on how a E-Mail virus scanning system can be useful in times like this, between 3 of our corporate client E-Mail systems, they have collectively blocked 600 of the W32/[EMAIL PROTECTED] (or WORM_MIMAIL.R / [EMAIL PROTECTED] depending on what you want to call it :) since yesterday. Another thing you can do is prevent workstations on the internal network from sending E-Mail out themselves (most of these worms have their own built in SMTP server). You can do this by preventing them from accessing any SMTP (port 25) server on the internet using your firewall. At least that way, in the chance that a workstation does become infected, you have at least done your job in containing it within your network and prevented further infection to other people outside your organization from your workstations. > > Thanks > > > Peter > > > _______________________________________________ > clug-talk mailing list > [EMAIL PROTECTED] > http://clug.ca/mailman/listinfo/clug-talk_clug.ca > > - -- Personal: Trevor Lauder Web: http://www.thelauders.net E-Mail: [EMAIL PROTECTED] -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.3 (GNU/Linux) iD8DBQFAFwkpBsV2IjgYy+cRAlrjAJ9Q3ctt+j28C/EnOY/AwkkVcD6zkACgjR2m FOOV8zR6uS32FOHzRiZ/UaU= =cb9L -----END PGP SIGNATURE----- _______________________________________________ clug-talk mailing list [EMAIL PROTECTED] http://clug.ca/mailman/listinfo/clug-talk_clug.ca
