LinuxQuestions.org
Review your favorite Linux distribution.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 06-04-2002, 03:02 PM   #16
koningshoed
Member
 
Registered: May 2002
Location: South Africa
Distribution: Gentoo
Posts: 103

Rep: Reputation: 15

Plus most id10ts uses outlook express, and to the best of my knowledge outlook sends first then receives . Good luck. Try hacking outlook to change this?
 
Old 06-05-2002, 04:32 AM   #17
Noerr
Member
 
Registered: May 2002
Location: Dalec, HU
Distribution: Redhat 7.3
Posts: 696

Original Poster
Rep: Reputation: 30
not quite true. If yo open Outlook Express it will check first + send, but when you have it open and create new mail + send it, i t wouldn't do any checking before sending.

btw
I figure out what is causing problem. It's kaspersky antivirus (kavkeeper), because it doesn't let sendmail to reject by rules in access, virtusertable.. first. Instead all mail proceeds to AV checking and then gets rejected, which causes a problem, when no "from" tag is specified.
I'm trying to work that out somehow.
 
Old 06-05-2002, 02:51 PM   #18
koningshoed
Member
 
Registered: May 2002
Location: South Africa
Distribution: Gentoo
Posts: 103

Rep: Reputation: 15
well, good luck. I don't bother with anti virus. I feel every user is there for himself. But then again - that is probably rude and checking for virusses is probably a good thing. But oh well, that is just me.
 
Old 06-05-2002, 02:54 PM   #19
Noerr
Member
 
Registered: May 2002
Location: Dalec, HU
Distribution: Redhat 7.3
Posts: 696

Original Poster
Rep: Reputation: 30
having antivirus on server saves (I guess not much in my case) you a lot of time=money.
Just think how much time do you need to take care of viruses on corporate network with even 20 computers
 
Old 06-05-2002, 03:19 PM   #20
koningshoed
Member
 
Registered: May 2002
Location: South Africa
Distribution: Gentoo
Posts: 103

Rep: Reputation: 15
true - but then again. All the windows machines in the network has Norton installed. But that is on a local lan, plus I only do relay to outside, mx is hosted somewhere else. But still - it would only be polite .
 
Old 06-05-2002, 04:24 PM   #21
Noerr
Member
 
Registered: May 2002
Location: Dalec, HU
Distribution: Redhat 7.3
Posts: 696

Original Poster
Rep: Reputation: 30
btw don't trust norton too much, we had it on 2 workstations installed and fully updated, but still very klez.h viruses ?
 
Old 06-05-2002, 04:35 PM   #22
koningshoed
Member
 
Registered: May 2002
Location: South Africa
Distribution: Gentoo
Posts: 103

Rep: Reputation: 15
just blocked one the other night using it. and i don't trust any system running anything from M$ ...
 
Old 06-06-2002, 05:15 AM   #23
Noerr
Member
 
Registered: May 2002
Location: Dalec, HU
Distribution: Redhat 7.3
Posts: 696

Original Poster
Rep: Reputation: 30
?
what is running from M$
 
Old 06-06-2002, 12:07 PM   #24
koningshoed
Member
 
Registered: May 2002
Location: South Africa
Distribution: Gentoo
Posts: 103

Rep: Reputation: 15
meaning if it runs windows (from M$ - don't trust it). Or any other product for that matter, so in order to run Norton, you need windows AFAIK, so it runs Windows, so I don't trust it.
 
Old 06-06-2002, 04:59 PM   #25
Noerr
Member
 
Registered: May 2002
Location: Dalec, HU
Distribution: Redhat 7.3
Posts: 696

Original Poster
Rep: Reputation: 30
btw, I tried to figure out if there is any free AV software for linux/sendmail, but no luck. Wierd a? no opens source project to deal with viruses
 
Old 06-07-2002, 09:58 PM   #26
[cacheflow]
Member
 
Registered: Jan 2002
Distribution: Debian 3.0
Posts: 49

Rep: Reputation: 15
Quote:
Originally posted by Noerr
btw, I tried to figure out if there is any free AV software for linux/sendmail, but no luck. Wierd a? no opens source project to deal with viruses
it would be just a little hard for open source developpers to sink the amount of time required for the above... most devellopers cant realease emergency patches every day... there is a reason you pay a faily high price for norton they have a lot of people working on new viruse defenitions...

detecting viruses isnt the easiest thing to do, due to the huge variety
 
Old 06-08-2002, 10:57 AM   #27
Noerr
Member
 
Registered: May 2002
Location: Dalec, HU
Distribution: Redhat 7.3
Posts: 696

Original Poster
Rep: Reputation: 30
quote:
...or norton they have a lot of people working on new viruse defenitions...
---------------

I think they have some additional to work on new viruses as well
 
Old 06-12-2002, 02:33 AM   #28
Token
LQ Newbie
 
Registered: May 2002
Location: Atlanta
Distribution: RH 7.2
Posts: 20

Rep: Reputation: 0
There's a great set of tools to help block spam, check for virus's and such as that.

Mailscanner - checks for virus's and really weird stuffs, can use several different virus packages
http://www.sng.ecs.soton.ac.uk/mailscanner/

SpamAssassin - set of perl scripts that fit nicely in with MailScanner
http://spamassassin.taint.org/

I also use RBL (blackhole) for keeping out those nasty spamservers.
www.five-ten-sg.com
 
Old 06-12-2002, 02:47 AM   #29
Noerr
Member
 
Registered: May 2002
Location: Dalec, HU
Distribution: Redhat 7.3
Posts: 696

Original Poster
Rep: Reputation: 30
need to take a look at those, thanks
i'm not up for rbl, but I'll check other 2
 
Old 06-12-2002, 04:39 PM   #30
mikeyt_333
Member
 
Registered: Jun 2001
Location: Up in the clouds
Distribution: Fedora et al.
Posts: 353

Rep: Reputation: 30
Didn't read all of the posts, but going back to the original subject, you could use pop b4 relay. I had a similar problem where I ended up on aol's list, and we had to close our relay, but in closing our relay we locked out those folks who accessed our pop3 via a dial-up or some other type of dynamic connection on a different net. To fix it I installed a popb4 relay that logs IP addresses after a successful pop3 log in, and then when the smtp server is accessed it scans the database for the particular IP, if it is in there it sends if not it gives a relaying denied message. Go to http://sendmail.org and search for Pop Before Relay or something along those lines and you will find it. The one I use it called poprelayd and it interfaces with sendmail fairly easily (relative to the rest of sendmail), and it works beautifully. If this was already solved ignore what I said, otherwise I hope this helps!

Last edited by mikeyt_333; 06-12-2002 at 04:40 PM.
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
spammers problem hinetvenkat Linux - Security 0 06-07-2005 06:09 AM
Very mad with spammers zidane2010 General 13 05-26-2004 01:57 PM
Spammers should be dragged out and shot! Pcghost Linux - Software 3 05-07-2003 08:54 AM
Spammers... Artimus LQ Suggestions & Feedback 10 03-18-2003 04:24 PM
Damn it kwigibo Programming 1 04-02-2002 04:35 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 05:28 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration