Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 23 Jul 2001 17:43:54 +1200
From:      "Philip Murray" <webmaster@open2view.com>
To:        <so@server.i-clue.de>, "Thierry Black" <thierryblack@hotmail.com>
Cc:        <freebsd-questions@FreeBSD.ORG>
Subject:   Re: SirCam virus
Message-ID:  <010001c1133a$762d0f60$0300a8c0@sparlak>
References:  <F214FSrAuWiqJmdTcjJ00003fcf@hotmail.com> <3B5BB586.74738053@i-clue.de>

next in thread | previous in thread | raw e-mail | index | archive | help
----- Original Message -----
From: "Christoph Sold" <so@server.i-clue.de>>
>
> Thierry Black wrote:
> >
> > Hello again! My server has received copies of this "SirCam" virus
notified
> > at www.symantec.com. We are using sendmail, and cyrus for delivery. How
can
> > I put a rule to block the messages? The subject, sender, attachment
name,
> > and headers are all random (taken from the virus victims email). The
only
> > common things are in the body. The messages start with "Hi! How are
you?"
> > and end with "See you later. Thanks".
> >
> > I need to block these messages from being sent to or from our email
server.
> > I have heard of procmail, but I don't know hwo to use it with sendmail
8.9.3
> > and cyrus.
>
> Have a look at amanda (www.amanda.org). It needs a (copmmercial) virus
> scanning engine to scan the mails, but it is able to scan all part fo a
> message (including compressed archives).

errr, amanda is a backup tool isn't it?

I'd probably recomend Amavis or Inflex, both of which integrate into
Sendmail

http://pldaniels.com/inflex/
http://www.amavis.org/

-------------------------------- -  -- -  -   -
Philip Murray - webmaster@open2view.com
http://www.open2view.com - Open2View.com
------------- -  -- -   -



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?010001c1133a$762d0f60$0300a8c0>