This is a reply only regarding the "to filter mail or not to filter"
question and the general antiviral policy.

Well, here's my two cents...

<2cents>
We've "demoronised" NT 4 Workstation-powered PCs as standard desktops
and Linux file/network servers - note, no Win9x or NT 4 servers. The
Linux box runs IPchains with a secure kernel and is connected to a 256K
DSL - pretty enough for a small office with a dozen computers. 
Now, the important part: none of the NT boxes has MSIE, Outlook or any
blatantly insecure stuff like that. Excuse me, but when there are a
dozen security patches for an application and new serious security holes
found in *each new version*, that app has to be in the "black list".
Without the WSH, the MSIE and the Outlook, most of the "viruses" coming
out lately, the VBS ones, are harmless. I just don't filter any mail for
anything, only do a simple scan on the arriving mail on the local POP3
proxy for executables. Another simple but effective technique is to
never install programmes into their default locations and have more than
one partition on the desktops' drives. Migrating mail can be a bit of a
headache, but it avoids a lot of pain in the future; in my case, we
didn't even have to migrate mail because most people use Eudora or
Netscape Messenger. The result: during the first week of May I took a
vacation, and the first time we got an iworm-loveletter it did
absolutely nothing. And not to say we don't have lots of mail coming in
(I work for a news company).
</2cents>
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]

Reply via email to