* Bill Arlofski <[EMAIL PROTECTED]> writes:
> Felix von Leitner wrote:
>> Thus spake Marian Dragomir ([EMAIL PROTECTED]):
>>> Do you have any idea to configure qmail with Interscan VirusWall ?
>> Don't. Antiviruses don't work and create a false sense of security.
> Felix, that's bad advice IMHO.
It is very sound advice. They don't work, otherwise there wouldn't be
any virus problems. They don't work, BTW, because the underlying
Operating System is broken.
> Our users will click anything that even remotely looks like an icon,
> and then when is doesn't 'run' or 'open' (ie: because it is a
> virus/trojan/worm) they are even ignorant enough to call desktop
> support for help.
Well, fire them. Yes it's in fact that easy. If you don't want to fire
them, use software that is not prone to this sort of attack. Can't to
that? Sue the vendor. Can't do that? Get real.
> Without antivirus on our inbound email server, we'd have allowed
> literally hundreds of email messages with the sircam virus into our
> network in just the last few weeks alone.
Oh yeah. Well, Bill, there is a downside to this as well:
,----
| O +61 [postmaster@plexustec]:=VIRUS IN YOUR MAIL TO sacharya
| O +51 <postmaster@plexustec>:
| O +1 [[EMAIL PROTECTED]]:=Virus Alert
| O +1 <[EMAIL PROTECTED]>:
| O +1 <postmaster@bizmailsr>:
| O +1 <[EMAIL PROTECTED]>:
| O +1 <[EMAIL PROTECTED]>:
| O +1 <postmaster@bizmailsr>:
| O +1 <[EMAIL PROTECTED]>:
| O +1 <[EMAIL PROTECTED]>:
| O +1 <[EMAIL PROTECTED] >:
| +1 <[EMAIL PROTECTED] >:
| +1 <[EMAIL PROTECTED] >:
| O +9 [Exim MTA at VIL ]:=Virus / harmful content found in EMail
| O +9 <Exim MTA at VIL >:
| O +31 [[EMAIL PROTECTED] ]:=Virus found in message from you!
| O +31 <[EMAIL PROTECTED] >:
| O +6 [NAV for Microsoft Ex]:=Norton AntiVirus detected and quarantined a virus in
|a message yo u sent.
| O +6 <NAV for Microsoft Ex>:
| O +4 [[EMAIL PROTECTED]]: Warning - Virus Detected: W32/SirCam@MM
| O +2 [[EMAIL PROTECTED] ]: Failed to clean virus file dwarf4you.exe
| O +12 [[EMAIL PROTECTED]]: A virus has been detected
| O +4 [[EMAIL PROTECTED]]: Warning - Virus Detected: W32/Hybris.gen@MM
`----
That's just the last couple of hours. Mail server on tux org. And a
bunch of wankers too dense to fix the problem (Windows) instead of the
symptom (my bandwidth). Virus my ass, Bill, this shit ain't funny. I've
had whole gigs of bandwidth eaten by this crap.
> Believe me, I KNOW it is a losing battle. But it is one that IMHO, we
> as admins
Do not put me in the same class as yourself. Ever.
> simply HAVE to fight to keep our unknowing users just a little bit safer,
"unknowing users"? What sort of pussy admin are you?
> and our desktop support people a little more productive.
You _what_? You mean those crack-toting hippies with mice and "Win2k for
idiots" fieldbooks? WTF has this go to do with a Unix MTA?
> Every virus stopped at the gateway is a possible desktop support call
> averted.
Every luser LARTed is a lot of support calls averted. Possibly forever.
