sobig virus

[Ulysees]

lower mx record ?

i've noticed almost half of the ones i'm getting are being relayed via one
of our lower preference mx's

Uly

----- Original Message -----
From: "Joe Stuart" <jstuart at EDENPR.K12.MN.US>
To: <MAILSCANNER at JISCMAIL.AC.UK>
Sent: Wednesday, August 20, 2003 3:50 PM
Subject: [MAILSCANNER] sobig virus


> I have Mailscanner running with f-prot and it seems to be stopping about
> 10-15 viruses a minute which is extremely high vloume. It also seems
> that a lot of them are getting through. A usual header of an email that
> comes from the outside starts with
>
> Received: from scrubber.edenpr.org
>         by edenpr.k12.mn.us; Wed, 20 Aug 2003 09:34:42 -0500
>
> the ones getting through seem to be starting with
>
> Recieved from PC2860
>        (splkpark.k12.mn.us[204.169.235.111])
>         by edenpr.k12.mn.us; Wed, 20 Aug 2003 09:32:28 -0500
>
> And they are all .pif's. Scrubber is the server with mailscanner on it.
> I'm coinfused about the PC2860
>
> Thanks
> Joe
>