There is no way your mail server can catch all of this. The only way that you can be sure you're not spreading like this (when programs have their own SMTP process) is to setup access control lists at your edge router, that do not allow any outgoing SMTP (port 25) requests, EXCEPT for your mail servers, out of your network.
- Legitimate mail will have to go thru your servers before going out to the world, letting Declude do it's job. - Outgoing mail that doesn't use your mail server will be blocked at your network edge. - You may have to 'poke holes' in the access list for those who are legitimately using an SMTP server on your service (or alternately tell them they must relay all outgoing mail thru your server). - Tony > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED]]On Behalf Of Mark Chadwick > Sent: Thursday, February 21, 2002 9:13 AM > To: Declude. Virus@declude. com > Subject: [Declude.Virus] New Virus!? > > > Does anyone know about the following and is Declude geared up for it? > > "...Note of caution: Some of the newer viruses are including a > complete copy > of SMTP (the mail server protocol) in them. They thus can bypass your > outgoing mail server (and virus detection system) and spread....." > > *(This is from my network management in the US and they DON'T use Declude) > > Thanks, > > Mark Chadwick > IT Support Engineer > Science International > > --- > [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . --- [This E-mail was scanned for viruses by http://www.intouchmi.com] --- [This E-mail was scanned for viruses by http://www.intouchmi.com] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
