Complatency will get you everytime

[Miguel Koren O'Brien de Lacy]

Gerry;

I assume this is a LAN at home?

To scan everything that that goes through your server you may want to look
into viralator and other solutions like it. You can find viralator at
http://viralator.loddington.com. Another good package is "frox" (search for it
on www.freshmeat.net) which is an ftp proxy and has configure switches to scan
ftp traffic. A good place to start is www.openantivirus.org

Miguel

Gerry Doris wrote:

> As I mentioned in an earlier message I haven't been plagued with a
> virus/worm in quite a while.  I dropped several problem mailing lists.
> Others instituted scanning at the list server.  Once my Sophos trial
> ran out I switched to F-PROT.  I was beginning to wonder if it was even
> working...
>
> My daughter uses a windows host (she detests linux...no MSN Messenger
> etc).  I had an old Norton antivirus package on that system but it finally
> expired and I removed it.  Strangely, the system had been a little
> unstable and removing the Norton package made it rock solid.
>
> It only took 3 days for my daughter to infect that host.  She was sent an
> attachment via Yahoo mail that was infected.  Yahoo mail is web based and
> doesn't go through my mailserver.  It goes directly to the host.  Last
> night I casually installed McAfee's package and bang...7 worm hits in
> different directories (two unique worms).
>
> I sent one of the files to myself through my mail server and mailscanner
> with F-PROT immediately found the worm.
>
> I didn't even know she was using a web based mailer.  I thought all mail
> was screened coming through my server!!!
>
> Gerry
> --
> "The lyfe so short, the craft so long to learne"  Chaucer