In reading a lot of the more recent posts, I am seeing a lot of you
having
trouble with viruses, attachments, and content, that I honestly don't see or
worry about.
This can only be a potential problem during initial outbreaks, and even
then, they usually have some other factor that catches them in the trash
filter.
I am primarily running:
1) BlackIce Server ISS (a program which blocks all suspicious traffic
[intrusion detection], like the MyDOOM, and Slammer, MSRPC, etc., get
blocked b/4 they get to SMTPrcv)
2) McAfee Netshield with AVP (which scans every attachment for viruses,
and auto-trashes anything that is infected (and shows a such on AVP TF
screen) (Also Note: configured to get signature file on an auto update:
hourly)
3) TrashFinder (Exception list for all good users, Keywords: Message Body
and Subject, for everything else.
4) Plugin9 (to catch the ones that try to spoof TF by sending as valid
user w/CC to others)
If you run with these, you should have an extremely clean, low
maintenance server.
Just trying to help some of you out a little....
John Martoccio
Fox Lake, IL, USA
[EMAIL PROTECTED]
> -----Original Message-----
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] Behalf Of Ted
> Sent: Wednesday, February 11, 2004 11:58 AM
> To: [email protected]
> Subject: Re: blocking attachments
>
>
> the version of TF that I use has an attachment button right
> on the main screen -
> last button. and inside that (on the right) is a list of
> attachments that I
> trap. That is where I trap my executable attachments and
> known viral attachments
> like phot os.z ip and send them to my /virus folder. I think
> your doc ument.z ip
> may be the payload for the mydoom virus.
>
> I am currently blocking all .zip files because of the mydoom
> virus. and with
> WinXP natively supporting compressed .zip files now and the
> popularity of .zips
> with the virus writers lately that entry may become a
> permenant part of my
> filters.
>
> Kerry Barlow wrote:
>
> > Hi all: How can I use TF to block certain attachments? I am
> gettting alot of
> > doc ument. z ip spam and a few other knwon spam
> attachments sneaking thru.
> > Thank you
> > Very respectfully, your obedient servant.
> > Brig. Gen. Johnston Pettigrew
> >
> > [EMAIL PROTECTED]
> > WWW server hosting Http://mntnweb.com
> > Kerry Barlow
> > p.o. box 21
> > kirkwood ny
> > 13795
> > 607-775-1575
> >
>
This is the discussion list for the IMS Free email server software.
To unsubscribe send mailto:[EMAIL PROTECTED]
Delivered by Rockliffe MailSite
http://www.rockliffe.com/mailsite
Rock Solid Software (tm)
