[plug] virus breaks through onto list

[Craig Foster]

ClamAV/Amavis on the MTA.

SME Server now transparent redirects *all* outgoing port 25 traffic to the
local MTA, and it's there that I scan for viruses. Quite nifty :)

Haven't seen an rogue attachment in almost a year...

CraigF. 

> -----Original Message-----
> From: plug-bounces at plug.linux.org.au 
> [mailto:plug-bounces at plug.linux.org.au] On Behalf Of Sol Hanna
> Sent: Wednesday, 12 May 2004 12:05 AM
> To: plug at plug.org.au
> Subject: [plug] virus breaks through onto list
> 
> Mondo embarrassment! I run an email list using Mailman with 
> nearly 900 subscribers. It's a news announcement list which 
> only 8 people can post to. Only a couple of hours ago a mail 
> got sent to this list with my email address in the "From:" 
> field and FxSasser.zip as an attachment.
> Yikes! :(
> 
> I've just reduced the allowable body length down from 40kb to 
> 5kb which I hope will catch anything with an attachment. But 
> does anyone have any suggestions of how I can block anything 
> with an attachment from getting to this list?
> 
> kind regards; sol
> --
> ------------------------
> Sol Hanna
> sol at autonomon dot net
> ------------------------
> 
> _______________________________________________
> PLUG discussion list: plug at plug.linux.org.au 
> http://mail.plug.linux.org.au/cgi-bin/mailman/listinfo/plug
> Committee e-mail: committee at plug.linux.org.au
> 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3059 bytes
Desc: not available
URL: <http://lists.plug.org.au/pipermail/plug/attachments/20040511/584b8c5c/attachment.bin>