RE: [Exim] System Filter Question + GFI EMail Security Testi…

Top Page
Delete this message
Reply to this message
Author: Derrick
Date:  
To: Gordon McKee
CC: exim-users
Subject: RE: [Exim] System Filter Question + GFI EMail Security Testing?
> Thanks for your reply - Seems daft they don't keep it up to date - is
> there a reason?


Well it's not a virus filter so much as it's just for stopping attachments
with executable extensions.. Virus scanning is done by the virus scanners,
so after the first number of versions getting all the executable
extensions that are beyond the basic (.com .exe .bat), there has just been
some minor touch ups. My understanding of the Klez virus is it that
it puts the name of the attachment in slightly modified place, so
adding the check for the virus is not scanning for virri, it's just
looking for the modified location, with various extensions. There are a
couple of virri that are checked for as well because they use a standard
return address with a certain type Subject: or something similar.. I hope
that my understanding is correct, if not, I'm sure someone on the list
will clarify, and hopefully I won't stir the biting sarcasm of Yann. ;)

>
> I have relaying sorted and not to fussed about auth. I just think that
> it is better to filter out mail before people get it in there inbox if
> there are viruses in it.
>
> Gordon
>
> -----Original Message-----
> From: Derrick MacPherson Contract Staff [mailto:dmacpher@mail.vfs.com]
> On Behalf Of Derrick
> Sent: 04 May 2002 21:09
> To: Gordon McKee
> Subject: Re: [Exim] System Filter Question + GFI EMail Security Testing?
>
>
> > Is there a latter version of this - the one on the site is dated Sept
> > 01?
>
> it's actually not really supported anymore, it does work for 3.x for
> sure,not sure about 4, it should.. if you look throught the last week or
> so archives, you will find an update that was posted by someone for the
> Klez virus
>
> > Also I have noted a few site that test what mail servers allow through
> > and most of the test on http://www.gfi.com/emailsecuritytest/ get
> > through. Does anyone have any updates that block the rest of them?
> My
> > copy of outlook xp blocked the rest - so I guess I am reasonably
> secure
> > - well as secure an any MS product is!!!
>
>
> The security and relaying is to be configured by the user, because what
> sort of relaying/authentication is up to the administrator.. the 'blocks
> are controlled by you, not by updates to the software generaly, unless
> there is a bug... My mail server allows no relaying of any sort, but I
> plan in the futre to enble SMTP AUTH to allow authenticated relaying..
>
>
> good luck
>
>
>
>



Derrick MacPherson
derrick@???