SV: OT: malscanner server bypassed

[Jan Agermose]

    [ The following text is in the "iso-8859-1" character set. ]
    [ Your display is set for the "US-ASCII" character set.  ]
    [ Some characters may be displayed incorrectly. ]

Hi

Ok, as a follow up to all your replys (first: thanks :-))

All our mailservers have virus and spamfilters - but the spamfilters are not very efficient and we are also looking at providing scannerservices for our customers who are running there own mailservers. 
That's why we are intalling MSGateway - and it is looking very, very good - missing a few features, but looking forward to version 1.8 and 2.0 :-D

But this is also our "problem". We are not able to simply put all domains on the scanner(s) all at once. And therefore we cannot lock down the firewall to accept only port 25 from the mailscanner(s). Not yet :-)

And sadly our windows mailserver has no option on a domain basis to say it should only come from the mailscanner(s) or from the "world". So the mailservers remain "open" for access. 

The problem is limited, as the current spamfilter does find some spammails, but it is not nearly as good as mailscanner :-)

But thanks for the input :-)

Best regards
Jan Agermose

 
 

-----Oprindelig meddelelse-----
Fra: MailScanner mailing list [mailto:MAILSCANNER at JISCMAIL.AC.UK] På vegne af Ugo Bellavance
Sendt: 27. juni 2005 16:29
Til: MAILSCANNER at JISCMAIL.AC.UK
Emne: Re: OT: malscanner server bypassed

Ugo Bellavance wrote:
> Jan Agermose wrote:
> 
>>Hi
>>
>> 
>>
>>A bit off topic i think J I have a mailscanner server running in front
>>of the pop3/smtp server. As the pop3 server receives mail for domains
>>not handled by the mailscanner server I cannot close down the pop3
>>server for mail not coming from/through the mailscanner.
>>
>>Now the problem is that a lot of spam seams to hit the pop3 server for
>>domains handled by the mailscanner but looking at the mailheader it
>>looks like the spammails where delivered to the pop3 server directly
>>bypassing the mailscanner. Could this be correct? And is this possible
>>to prevent in any?
>>
>> 
>>
>>The MX of the domain is pointing to the mailscanner server.
>>
>> 
> 
> 
> Firewall rules?
> 
Sorry, I misread.  Maybe having everything relay trough your MailScanner
machine, and disable all checks for 'domains not handled by MailScanner'.

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the Wiki (http://wiki.mailscanner.info/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the Wiki (http://wiki.mailscanner.info/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!