On 08/21/03 at 10:51 -0400, Charles Mangin opined:
> but how about worms? (worms? viruses? that's so out of left field! what
> makes you bring that up now?)
>
> is there any functionality in SIMS or a third party app that works in
> conjunction with SIMS to filter email based on, say file attachment
> types?
Heh. Dèja vú. Didn't we just have this thread yesterday? Or was it the day
before?
> something as simple as no .exe, .scr .pif... because most of the worm
> traffic i've seen looks like legitimate email (though it's forged
> headers, which confuses me.. i thought sims caught forged headers
> most of the time?)
What makes you think that?
> it wouldn't even need to filter based on content, just look at file
> attachments and their names, and i'd be satisfied.
Headers, file attachments and attachment names _are_ message content. SIMS
doesn't catch forged headers because it doesn't touch any part of messages'
contents (i.e. the DATA portion of messages). It will check that
Return-Path domains resolve to A records, but that's something different
(the Return-Path is part of the envelope, not the DATA). The bottom line is
that if you want to do any sort of content filtering -- virus scanning,
spam filtering, etc. -- at the server on incoming mail, then SIMS is the
wrong MTA for you. You could, I suppose, have SIMS accept mail from the
internet and then pass it on to another server that can do content
filtering for delivery to user accounts. At some point, though, you have to
start wondering whether it's worth the effort to make the round peg fit
into the square hole.
--
Christopher Bort | [EMAIL PROTECTED]
Webmaster, Global Homes | [EMAIL PROTECTED]
<http://www.globalhomes.com/>
#############################################################
This message is sent to you because you are subscribed to
the mailing list <[EMAIL PROTECTED]>.
To unsubscribe, E-mail to: <[EMAIL PROTECTED]>
To switch to the DIGEST mode, E-mail to <[EMAIL PROTECTED]>
To switch to the INDEX mode, E-mail to <[EMAIL PROTECTED]>
Send administrative queries to <[EMAIL PROTECTED]>
