From owner-freebsd-questions Sun Jul 22 22:38:44 2001 Delivered-To: freebsd-questions@freebsd.org Received: from mta2-rme.xtra.co.nz (mta2-rme.xtra.co.nz [203.96.92.3]) by hub.freebsd.org (Postfix) with ESMTP id 198EF37B405 for ; Sun, 22 Jul 2001 22:38:41 -0700 (PDT) (envelope-from webmaster@open2view.com) Received: from sparlak ([210.55.116.37]) by mta2-rme.xtra.co.nz with ESMTP id <20010723053838.KQAA5908052.mta2-rme.xtra.co.nz@sparlak>; Mon, 23 Jul 2001 17:38:38 +1200 Message-ID: <010001c1133a$762d0f60$0300a8c0@sparlak> From: "Philip Murray" To: , "Thierry Black" Cc: References: <3B5BB586.74738053@i-clue.de> Subject: Re: SirCam virus Date: Mon, 23 Jul 2001 17:43:54 +1200 MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 5.50.4522.1200 X-MIMEOLE: Produced By Microsoft MimeOLE V5.50.4522.1200 Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG ----- Original Message ----- From: "Christoph Sold" > > > Thierry Black wrote: > > > > Hello again! My server has received copies of this "SirCam" virus notified > > at www.symantec.com. We are using sendmail, and cyrus for delivery. How can > > I put a rule to block the messages? The subject, sender, attachment name, > > and headers are all random (taken from the virus victims email). The only > > common things are in the body. The messages start with "Hi! How are you?" > > and end with "See you later. Thanks". > > > > I need to block these messages from being sent to or from our email server. > > I have heard of procmail, but I don't know hwo to use it with sendmail 8.9.3 > > and cyrus. > > Have a look at amanda (www.amanda.org). It needs a (copmmercial) virus > scanning engine to scan the mails, but it is able to scan all part fo a > message (including compressed archives). errr, amanda is a backup tool isn't it? I'd probably recomend Amavis or Inflex, both of which integrate into Sendmail http://pldaniels.com/inflex/ http://www.amavis.org/ -------------------------------- - -- - - - Philip Murray - webmaster@open2view.com http://www.open2view.com - Open2View.com ------------- - -- - - To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message