Based on Scotts comments, I guess I should clarify a bit: - Incoming messages will still be scanned (they do have to come to your server, be scanned, and sit there for the user to read), so Declude can definately do it's job there. - My comments were mostly to control the spread FROM your clients, to others on the Internet, the ones that might be bypassing your mail server.
- Tony > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED]]On Behalf Of Tony Gray - System > Administrator > Sent: Thursday, February 21, 2002 9:49 AM > To: [EMAIL PROTECTED] > Subject: RE: [Declude.Virus] New Virus!? > > > There is no way your mail server can catch all of this. The only way that > you can be sure you're not spreading like this (when programs > have their own > SMTP process) is to setup access control lists at your edge > router, that do > not allow any outgoing SMTP (port 25) requests, EXCEPT for your mail > servers, out of your network. > > - Legitimate mail will have to go thru your servers before going > out to the > world, letting Declude do it's job. > - Outgoing mail that doesn't use your mail server will be blocked at your > network edge. > - You may have to 'poke holes' in the access list for those who are > legitimately using an SMTP server on your service (or alternately > tell them > they must relay all outgoing mail thru your server). > > - Tony > > > -----Original Message----- > > From: [EMAIL PROTECTED] > > [mailto:[EMAIL PROTECTED]]On Behalf Of Mark Chadwick > > Sent: Thursday, February 21, 2002 9:13 AM > > To: Declude. Virus@declude. com > > Subject: [Declude.Virus] New Virus!? > > > > > > Does anyone know about the following and is Declude geared up for it? > > > > "...Note of caution: Some of the newer viruses are including a > > complete copy > > of SMTP (the mail server protocol) in them. They thus can bypass your > > outgoing mail server (and virus detection system) and spread....." > > > > *(This is from my network management in the US and they DON'T > use Declude) > > > > Thanks, > > > > Mark Chadwick > > IT Support Engineer > > Science International > > > > --- > > [This E-mail was scanned for viruses by Declude Virus > (http://www.declude.com)] > > This E-mail came from the Declude.Virus mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.Virus". You can E-mail > [EMAIL PROTECTED] for assistance. You can visit our web > site at http://www.declude.com . > --- > [This E-mail was scanned for viruses by http://www.intouchmi.com] > > > --- > [This E-mail was scanned for viruses by http://www.intouchmi.com] > > --- > [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . --- [This E-mail was scanned for viruses by http://www.intouchmi.com] --- [This E-mail was scanned for viruses by http://www.intouchmi.com] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
