Dunno offhand what y'all are using on the server side to run the list at GTA, but if it supports procmail, I've found the following tool most useful for filtering out this crap (this was filtered but I still get notices):
http://www.impsec.org/email-tools/procmail-security.html It's caught badtrans and goner on the way in before they were even recognized by Symantec and such. Had about 15-20 goners this morning alone. High level of accuracy with few false positives. Also free. Extremely useful if you're unfortunate enough to be saddled with an exchange/outlook (aka LookOut) environment. We don't use either, so most of the viruses and worms are pretty much useless against us, but the system keeps the users from getting uptight, and gives us interesting statistics on how many are coming in... Come to think of it, I'm not sure it's worth the trouble, but it could probably be implemented into the GBFlash and such, would be a nice selling point to the Exchange/LookOut admins... Thinking out loud here, don't take me too seriously... ;-) Regards, Ed Hintz Network Systems Administrator Natus Medical, Inc. [EMAIL PROTECTED]
