check out our virus activity with not many users on our servers
http://www.metro.com.mx/virusreport/report.cfm
this is a graph made out of the info
http://kompressor.metro.com.mx/graficas/virushourgraph.gif
98% of the actual smtp activity right now is MyDoom virus.. and I really have to say.. things are way more calm now than they where 2 weeks ago.. we had 4 times the connections from the virus
even after stopping the virus emails on our firewal, there are many connections in our smtp (considering the spamassassin proxy is stoping 20% of them).. I guess (in my opinion) the best way to cover this is to have a layer before the smtp to stop unwanted connections.
by the way.. is there anybody out there that have manage to implement spamassassin within IMS?
********************************************
* Guillermo Dewey Guerra
* Metro Solutions S.A. de C.V.
* [EMAIL PROTECTED]
* ICQ: 106180000 (GDewey)
* MSN: [EMAIL PROTECTED]
*
* http://www.metro.com.mx
* http://www.destinoweb.com
*
* Tel. (011) (52) (8) 3-90-7000
* Fax (011) (52) (8) 3-90-7001
* Cel. (011) (52) (044) (8) 3-09-24-16
* Monterrey N.L. Mexico
At 11:09 p.m. 09/02/2004 -0500, you wrote:
There's not much you can do to avoid the connections. Phil Beazley posted some info and a code download the other day to combat this. The thread is here: http://www.mail-archive.com/[EMAIL PROTECTED]/msg11150.html
HTH,
Howie
- ----- Original Message -----
- From: Bartee Lamar
- To: inFusion Support List
- Sent: Monday, February 09, 2004 10:12 PM
- Subject: [iMS] eMail FLOOD !!!
- I am getting a HUGH amount on email to several of my accounts.
- The addresses are like [EMAIL PROTECTED] or [EMAIL PROTECTED] and many more to other names and domains. NOTE: These names do not exist. I have captured a couple of the messages. they look like they have an attachment, which is probably the virus.
- They are coming from mxsf19.cluster1.charter.net and other places.
- It looks like they all get caught in RCPT.cfm and bounced for not having a valid eMail addres on my server.
- They are eating up my 25 threads on many occasions. I have debug turned on and I am getting VERY large log files. Like 18 meg. 170,000 lines.
- Would it be better to turn off debug. How much overhead do this add.?
- Is there a more effecient way to stop them?
- ANY help would be appriciated.
- Bartee Lamar
- Credit Card Merchant Accounts / Web Sites & Hosting / eCommerce / eMail Marketing
- www.enterpriseenergy.com
- MSN: [EMAIL PROTECTED]
- ICQ: 62263807
- AIM:barteelamar
- Business Phone: 770 642 1502
- This list server is Powered by iMS "The Swiss Army Knife of Mail Servers"
- This list is provided as a free service. Although we will try to address issues in a timely manner, support via this list is not guaranteed. If you require expedited support then a support contract is required. Support may be purchased from http://www.coolfusion.com/commerce. Details regarding support options may be reviewed at: http://www.coolfusion.com/SupportOptions.cfm.
- To leave this list please complete the form at http://www.coolfusion.com/Support/
- Need an iMS Developer license? Sign up for a free license here: http://www.coolfusion.com/Developers/
- List archives: http://www.mail-archive.com/infusion-email%40eoscape.com/
- Note: You are subscribed as [EMAIL PROTECTED]
********************************************
|
This list server is Powered by iMS "The Swiss Army Knife of Mail Servers" This list is provided as a free service. Although we will try to address issues in a timely manner, support via this list is not guaranteed. If you require expedited support then a support contract is required. Support may be purchased from http://www.coolfusion.com/commerce. Details regarding support options may be reviewed at: http://www.coolfusion.com/SupportOptions.cfm. To leave this list please complete the form at http://www.coolfusion.com/Support/ Need an iMS Developer license? Sign up for a free license here: http://www.coolfusion.com/Developers/ List archives: http://www.mail-archive.com/infusion-email%40eoscape.com/ Note: You are subscribed as [EMAIL PROTECTED] |
