Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 23 Jul 2001 07:26:30 +0200
From:      Christoph Sold <so@server.i-clue.de>
To:        Thierry Black <thierryblack@hotmail.com>
Cc:        freebsd-questions@FreeBSD.ORG
Subject:   Re: SirCam virus
Message-ID:  <3B5BB586.74738053@i-clue.de>
References:  <F214FSrAuWiqJmdTcjJ00003fcf@hotmail.com>

next in thread | previous in thread | raw e-mail | index | archive | help


Thierry Black wrote:
> 
> Hello again! My server has received copies of this "SirCam" virus notified
> at www.symantec.com. We are using sendmail, and cyrus for delivery. How can
> I put a rule to block the messages? The subject, sender, attachment name,
> and headers are all random (taken from the virus victims email). The only
> common things are in the body. The messages start with "Hi! How are you?"
> and end with "See you later. Thanks".
> 
> I need to block these messages from being sent to or from our email server.
> I have heard of procmail, but I don't know hwo to use it with sendmail 8.9.3
> and cyrus.

Have a look at amanda (www.amanda.org). It needs a (copmmercial) virus
scanning engine to scan the mails, but it is able to scan all part fo a
message (including compressed archives).

HTH
-Christoph Sold

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?3B5BB586.74738053>