[Dshield] Virus emails
Nguyen Nhu Hao
nhuhao at vnuhcm.edu.vn
Thu Jan 29 16:41:50 GMT 2004
Thanks alot for your help, I informed all my users about MyDoom, I hope they
help me protect from inside, and now I build scanner for my server to
Nguyen Nhu Hao
----- Original Message -----
From: "Bart E. Hawley Sr." <bart at texan.net>
To: "General DShield Discussion List" <list at dshield.org>
Sent: Wednesday, January 28, 2004 12:38 PM
Subject: Re: [Dshield] Virus emails
> >----- Original Message -----
> >From: "Johannes B. Ullrich"
> >To: "General DShield Discussion List" <list at dshield.org>
> >Sent: Wednesday, January 28, 2004 6:56 AM
> >Subject: Re: [Dshield] Virus emails
> > you should install a virus scanner on your mail server.
> >There is no way to easily filtering viruses without inspecting
> >the content of an e-mail. So you have to accept the e-mail,
> >scan it, and then drop it or not pending the outcome of the
> Actually, depending on your level of access and expertise:
> With a combination of MIMEDefang, Sendmail, ClamAV, and SpamAssassin; it
> possible to reject/bounce or discard virused emails during the smtp
> I chose to reject the virused emails to end usage of bandwidth at the
> earliest possible
> time. While logging the IPs of the senders to the maillog to facilitate
> easily adding the
> worst of the offenders to my firewall for a period of time to ease the
> on the
> servers even more so. Good Luck Nguyen.
> Bart E. Hawley Sr.
> Systems Administrator
> BNet, Inc.
> >>On Wed, 2004-01-28 at 13:48, Nguyen Nhu Hao wrote:
> >> Dear list,
> >> My servers have recieved many virus emails, how should I do to stop ?
> >> used real domain so I cannot deny their domains.
> >> Thanks for your help
> >> Nguyen Nhu Hao
> >CTO SANS Internet Storm Center http://isc.sans.org
> >phone: (617) 837 2807 jullrich at sans.org
> >contact details: http://johannes.homepc.org/contact.htm
> > _______________________________________________
> list mailing list
> list at dshield.org
> To change your subscription options (or unsubscribe), see:
More information about the list