I think that would work great for an end-point mail server.  You could never
do that if you were hosting emails for others.  I have users on
###-###.dsl.net addresses that have email accounts on my servers.  They
wouldn't be able to send emails.

Again... good idea for personal email server, but not for ISPs.
------------------------------------------------------------
Jason J Ellingson
Technical Consultant

615.301.1682 : nashville
612.605.1132 : minneapolis

www.ellingson.com
[EMAIL PROTECTED]

-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On
Behalf Of Tracy
Sent: Friday, November 19, 2004 8:32 AM
To: [EMAIL PROTECTED]
Subject: [xmail] Re: F-Prot vs NAI vs Sophos

I currently use F-Prot as by "backup" virus scanner. It's probably caught, 
oh, somewhere around 10 virus emails this month (all that made it through 
my primary scanner).

My primary scanner, however, is very efficient at catching viruses - it 
also catches quite a few spams and phishing emails... It's a little program 
I wrote that plugs in as a pre-data filter and tests the RDNS for a number 
of known patterns. For example:

*dsl*.*.com
*dsl*.*.net
*dsl*.*.*.??    // catches a lot of stuff out of .JP and .BR
*#.###.###.#*   // where "#" represents a digit between 0 and 9, inclusive
*#.##.###.#*    // and other variations to catch IP addresses in RDNS names
*dhcp*.*.com
*dhcp*.*.net
*dhcp*.*.*.??

And so on. Checks for patterns containing things like DSL, DHCP, CABLE, 
MODEM, DIAL, etc, as well as raw IP addresses (separated by periods or
dashes).

Eliminates a truly large number of viruses (before putting it in place, my 
virus scanner was catching probably 50 - 100 viruses per day (and missing 
who knows how many), now it's doing good to catch 10 per week).

Something to think about, if you're in a position to implement it...

-
To unsubscribe from this list: send the line "unsubscribe xmail" in
the body of a message to [EMAIL PROTECTED]
For general help: send the line "help" in the body of a message to
[EMAIL PROTECTED]

Reply via email to