Mailman and MailScanner

Julian Field MailScanner at ecs.soton.ac.uk
Sat Apr 30 17:10:08 IST 2005


    [ The following text is in the "ISO-8859-1" character set. ]
    [ Your display is set for the "US-ASCII" character set.  ]
    [ Some characters may be displayed incorrectly. ]

You don't need attachments to send viruses. Uuencoded data put in the
middle of a message will be picked up by mail clients as readable files,
without them being proper attachments at all.
As a fine example the "MyParty" virus exploited this loophole to great
effect at the time.

Doc Schneider wrote:

> Julian,
>
> All the lists are set to not allow attachments. I do that specifically
> to avoid sending virus payloads to unsuspecting list members. I'll,
> however, look into another virus scanner to use. Using ClamAV right now,
> any suggestions?
>
> Thanks,
>
> -Doc
>
>
> Julian Field wrote:
>
>> One more thing: use more than 1 virus scanner. A total failure in your
>> incoming scanning will distribute viruses to your list subscribers. You
>> should use 2 or 3 scanners so that they don't fail together.
>>
>> Stephen Swaney wrote:
>>
>>>> -----Original Message-----
>>>> From: MailScanner mailing list [mailto:MAILSCANNER at JISCMAIL.AC.UK] On
>>>> Behalf Of Doc Schneider
>>>> Sent: Saturday, April 30, 2005 11:43 AM
>>>> To: MAILSCANNER at JISCMAIL.AC.UK
>>>> Subject: Mailman and MailScanner
>>>>
>>>> I run a lot of mailing lists here--using Mailman 2.1.4--and am
>>>> seriously
>>>> thinking of adding MailScanner to the box that hosts them.
>>>>
>>>> Anyone else doing this and any "gotchas" you can pass along?
>>>>
>>>> Also going to be using the new Spamassassin 3.0.3 w/SQL bayes on
>>>> it. Am
>>>> running 2.64 currently and doing some procmail magic to keep the spam
>>>> down to a minimum.
>>>>
>>>> TIA,
>>>>
>>>> -Doc
>>>>
>>>>
>>>
>>>
>>> We have a setup exactly like you are proposing. It works well with no
>>> real
>>> issues.
>>>
>>> My only concern would be capacity / loading but that is more of a
>>> Mailman
>>> issue. Our list server is a system mostly dedicated to running
>>> Mailman. It
>>> has no real mailboxes so the only email is junk and email destined for
>>> Mailman. This is a pretty light load for MailScanner and SpamAssassin.
>>>
>>> Hope this helps,
>>>
>>> Steve
>>>
>>> Steve Swaney
>>> President
>>> Fortress Systems Ltd.
>>> Phone: 202 338-1670
>>> Cell: 202 352-3262
>>> www.fsl.com
>>> steve.swaney at fsl.com
>>>
>>> ------------------------ MailScanner list ------------------------
>>> To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
>>> 'leave mailscanner' in the body of the email.
>>> Before posting, read the Wiki (http://wiki.mailscanner.info/) and
>>> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>>>
>>> Support MailScanner development - buy the book off the website!
>>>
>>>
>>>
>>
>> --
>> Julian Field
>> www.MailScanner.info
>> Buy the MailScanner book at www.MailScanner.info/store
>> Professional Support Services at www.MailScanner.biz
>> MailScanner thanks transtec Computers for their support
>>
>> PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
>>
>> ------------------------ MailScanner list ------------------------
>> To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
>> 'leave mailscanner' in the body of the email.
>> Before posting, read the Wiki (http://wiki.mailscanner.info/) and
>> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>>
>> Support MailScanner development - buy the book off the website!
>
>
> ------------------------ MailScanner list ------------------------
> To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
> 'leave mailscanner' in the body of the email.
> Before posting, read the Wiki (http://wiki.mailscanner.info/) and
> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>
> Support MailScanner development - buy the book off the website!
>

--
Julian Field
www.MailScanner.info
Buy the MailScanner book at www.MailScanner.info/store
Professional Support Services at www.MailScanner.biz
MailScanner thanks transtec Computers for their support

PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the Wiki (http://wiki.mailscanner.info/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!




More information about the MailScanner mailing list