Virus reporting

[Corey S. McFadden]

Phil,

You may be interested in this:
http://web.csma.biz/apps/vnames.shtml

-Corey

At 06:44 AM 11/28/2003, you wrote:
>That's so obvious in retrospect :-)
>
>Thanks Julian.
>
>A few stats you might be interested in - yesterday (our first day fully
>live) our gateway processed 6574 emails (around 4400 incoming) totalling
>541MB, of which 287 were flagged as spam (104 high scorers, no false
>positives amongst the high scorers) and 58 viruses, mostly Swen and Mimail.
>
>Cheers,
>
>Phil
>
>---------------------------------------------
>Phil Randal
>Network Engineer
>Herefordshire Council
>Hereford, UK
>
> > -----Original Message-----
> > From: MailScanner mailing list [mailto:MAILSCANNER at JISCMAIL.AC.UK]On
> > Behalf Of Julian Field
> > Sent: 28 November 2003 11:22
> > To: MAILSCANNER at JISCMAIL.AC.UK
> > Subject: Re: Virus reporting
> >
> >
> > At 10:56 28/11/2003, you wrote:
> > >After being hammered yesterday by an infected external host
> > trying to send
> > >Swen to dozens of users here we temporarily changed "Still
> > Deliver Silent
> > >Viruses" to no.
> >
> > If you are using sendmail, check out the new "IPBlock" code in
> > CustomConfig.pm when I release it all this weekend. This will
> > rate-limit
> > various systems and/or networks to a configurable number of
> > messages per
> > hour, so you will no longer be swamped by the occasional
> > infected host,
> > either internal or external.
> >
> > >The MailScanner.conf says this can be a ruleset.  Is it
> > possible to not
> > >deliver based on virus names, and if so, what would such a
> > ruleset look
> > >like?  The FAQ needs updating on this issue.
> >
> > Virus:  some-virus-name yes
> > Virus:  other-virus-name        no
> > FromOrTo: default               yes
> >
> >
> >
> > >Cheers,
> > >
> > >Phil
> > >
> > >---------------------------------------------
> > >Phil Randal
> > >Network Engineer
> > >Herefordshire Council
> > >Hereford, UK
> >
> > --
> > Julian Field
> > www.MailScanner.info
> > MailScanner thanks transtec Computers for their support
> >
> > PGP footprint: EE81 D763 3DB0 0BFD E1DC  7222 11F6 5947 1415 B654
> >
>
>*********************************************
>This message has been scanned for viruses and
>dangerous content, and is believed to be clean.


*********************************************
This message has been scanned for viruses and
dangerous content, and is believed to be clean.