Virii detection very low

[Julian Field]

-----BEGIN PGP SIGNED MESSAGE-----

On 26 Oct 2005, at 13:56, Jeff A. Earickson wrote:

> On Tue, 25 Oct 2005, Drew Marshall wrote:
>
>
>>>> Lull before the storm? It's been quiet on the list for ages now.  
>>>> I can't believe the virus writers have given up.
>>>> Drew
>>>>
>>> Drew,
>>>   Not true.  We have been getting our butts kicked in the last week
>>> by Windoze boxes infected with Mytob variants that quickly morph  
>>> into
>>> spambots.  Some spambots go directly out to the Internet, and  
>>> some route email via our mail server.  Our legit mail server  
>>> ended up in Spamcop this morning.  Ouch.  The IPBlock feature of  
>>> MailScanner has been some help here but it isn't pretty.  The  
>>> virus writers have an unholy alliance with the spammers now.
>>> Jeff Earickson
>>> Colby College
>>>
>>
>> Jeff
>>
>> Ouch, not nice. Looks like I am one of the lucky few. i don't have  
>> huge numbers of messages but I would expect 1-2% used to be  
>> viruses and currently I haven't seen a virus for a good couple of  
>> days. Doesn't stop the Spam (Which is still being eaten my MS/ SA)  
>> which is at it's normal levels.
>>
>> Do/ (Did!) you have a rule set not spam scanning internal clients?  
>> I guess if you have a load of spambot infected boxes from Mr Gates  
>> you have to scan for spam in both directions but the internal  
>> stuff must be a nightmare :-(
>>
>
> I always have.  The only thing that is trusted is 127.0.0.1 on the  
> mail server itself.  The IPBlock feature of MS has been a help.

Glad to hear that IPBlock is useful to some people. I wasn't sure it  
would actually help much.
- -- 
Julian Field
www.MailScanner.info
Buy the MailScanner book at www.MailScanner.info/store
PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654


-----BEGIN PGP SIGNATURE-----
Version: PGP Desktop 9.0.2 (Build 2425)

iQEVAwUBQ1+R9/w32o+k+q+hAQF3nAf+IByt9OqlMOJAwRLItwEsMywykLsRXnEw
gle5IsmcBAq2ASl9LLlStQBOlAbfd7a7FXFHfRcl5c7zJhYAesFQ32I1xn5HxJn1
QmD05Fc5cn4QN6kRAX+s57cSQA9iBio2Z4WWrxQ/xuUkvT8P6wrtI2OTAp2Ma/XO
tGM8aAVVKnhcU00DitRRsvJ3L48GPpsyLHUfwdmvLgEi3T2Gm+6x5MAiqNi7Enyf
onT2tdInsRkYBiy6WiDX0uR7Il84b5Fj0/CsruhTRuGGSImXRs1KI6tcd1FCvI3d
AgTEgb6fLu2ZDWJjhnv4nfga+hp8pBDC8QpThy7cbSi1wGVEgEqCLw==
=VJoS
-----END PGP SIGNATURE-----

-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the Wiki (http://wiki.mailscanner.info/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!