RE: Antivirus

[Joe N. <lj...@st...>]

I didn't have that problem, but your solution is very interesting and would
probably work well in most situations anyway.

Although it is OT, with the talk of red code, sircam, etc., it's good to
know this stuff.  Our server has intercepted and stopped nearly 100 e-mails
infected with the sircam virus.

Joe

-----Original Message-----
From: web...@li...
[mailto:web...@li...]On Behalf Of Adrian T
Stacey
Sent: Tuesday, July 31, 2001 7:54 AM
To: web...@li...
Subject: Re: Antivirus


Joe Newby wrote:
>
> Go to http://www.hbedv.com
>
> Same outfit, same program, only in English.  Works very good under Linux.
> They have a program called avmailgate for Linux - takes a little work to
get
> right with sendmail, but it is very effective for intercepting infected
> e-mail.

Yes, I use it here.  avmailgate in the current release cannot close uucp
relays, so as a work around I use sendmail on one machine to handle all
the rules then forward it to second machine running avmailgate, another
copy of sendmail on the second machine handles final delivery, local and
remote.

Avmailgate atually binds to port 25 itself and using a backdoor to
sendmail is very effective.  If you don't have uucp rules, you can set
up avmailgate and sendmail backdoor in under an hour, including
installation.  Upgrading both the program and the virus definition is as
simple as copying the new ones into the directory and restarting.

Sorry, it is now a bit OT but virus control is always a useful topic...
But to help a bit, I use Webmin's monitor module to check that
avmailgate and the avmail forwarder are running <vbg>

Adrian

-
Forwarded by the Webmin mailing list at web...@li...
To remove yourself from this list, go to
http://lists.sourceforge.net/lists/listinfo/webadmin-list