imho I may be mistaken, but I believe the messages referred to are generated by a virus/worm. If this is the case, the "correct" (again, imho) place to handle this would be as your are scanning the messages, not at the MTA level *unless* the mail server is on a slow link or does not have the resources necessary for the load -or- the load in that particular case justifies blocking at the MTA level (or firewall, border routers, etc.)
We block(ed) sobig at the MTA level, but we let MailScanner/Sophos handle most of the other virus/worm generated traffic. I guess this also depends if you have multiple servers with different functions as well. I am sure there are many possibilites that are "correct" in any given situation. How do most of you decide? Youn Gonzales System Administrator Comptia A+, Network+, INET+, Cisco CCNA/CCDA Certified Technician Microsoft Certified Professional I have an existential map; it has you are here written all over it. - Steven Wright ----- Original Message ----- From: "Jeff Bailey" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Cc: <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]> Sent: Tuesday, October 07, 2003 3:40 PM Subject: RE: [Razor-users] Help! I'm getting over 20MB of Spam a day! {Scanned by HJMS} > Bah Jeff. Think *then* post. You said mailscanner, not spamassassin. > Sorry. =) > > On Tue, 2003-10-07 at 14:50, [EMAIL PROTECTED] wrote: > > Um, the concept is correct - you'll be better off if you can block at > > the > > MTA level - but the implementation recommended doesn't do that. > > MailScanner > > only touches messages *after* they've been accepted by the MTA. A > > milter-based tool, such as MimeDefang, will hook into the MTA to allow > > rejection of the message before it's accepted in many cases, and > > before it's > > written to disk in most cases. I think MailScanner is great - I use it > > - > > but it doesn't work at the MTA level. > > _______________________________________________ > > Razor-users mailing list > > [EMAIL PROTECTED] > > https://lists.sourceforge.net/lists/listinfo/razor-users > > > > ------------------------------------------------------- > This sf.net email is sponsored by:ThinkGeek > Welcome to geek heaven. > http://thinkgeek.com/sf > _______________________________________________ > Razor-users mailing list > [EMAIL PROTECTED] > https://lists.sourceforge.net/lists/listinfo/razor-users > ------------------------------------------------------- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf _______________________________________________ Razor-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/razor-users