Palyh-A virus

Julian Field mailscanner at ecs.soton.ac.uk
Mon May 19 18:52:33 IST 2003


At 18:27 19/05/2003, you wrote:
>Maybe we should create sort of a sender's domain list of domain names
>and/or mail server ip adresses for our own local mail servers. If there
>are any virus messages from those domains / ip's then the local
>postmaster should be notified, or otherwise drop the notification?

See the "Notify Senders", "Deliver Cleaned" and "Send Notices" options.
I think they pretty much do what you want already.

>On Mon, 19 May 2003, Julian Field wrote:
> > At 16:42 19/05/2003, you wrote:
> > > > At 14:24 19/05/2003, you wrote:
> > > > >On Mon, 19 May 2003 06:41:54 -0600, you wrote:
> > > > >
> > > > > >Thanks to MailScanner, three .pif attachments that
> > > > included Palyh-A were
> > > > > >stopped before Sophos had an updated definition!
> > > > >
> > > > >It is called W32/Sobig.B at mm by f-prot.
> > > >
> > > > The upgrade_MailScanner_conf script will copy over your old
> > > > setting for the
> > > > "Silent Viruses" parameter, so you will need to add this one
> > > > yourselves.
> > > >
> > > > In new installations, both "Palyh" and "Sobig" are included
> > > > in the list.
> > >
> > >If it's not already done, can you add "Fizzer" to the list too?  Thanks.
> >
> > Done.
> > I'm going to have to do something about this list soon, it was better off
> > in a file like it was in version 3. For V4 I wanted to get rid of all those
> > "special" files if I could.
> >
> > How about a filename or a list of virus names. Then it just reads the list
> > of virus names out of the file. Then you could still use a ruleset which
> > produced a filename which in turn contained the virus names.
> > --
> > Julian Field
> > www.MailScanner.info
> > MailScanner thanks transtec Computers for their support
> >

--
Julian Field
www.MailScanner.info
Professional Support Services at www.MailScanner.biz
MailScanner thanks transtec Computers for their support



More information about the MailScanner mailing list