....
 

Guardian Digital Inc. > InfoCenter > Mailing List Archives > Amavis

Amavis Mailing List Archive

From: Noel Jones (njones@megan.vbhcs.org)
Date: Wed Dec 15 2004 - 14:44:00 EST


At 01:21 PM 12/15/04, lst_hoe01@kwsoft.de wrote:
>Zitat von Robert Fitzpatrick <robert@webtent.com>:
>
> > I have over 10000 messages in the Postfix queue running amavisd-new 2.2.0
> > thanks to a virus.
> >
> > These messages are return messages basically telling users they tried
> to send
> > a virus, which I'm sure most did not. How can I possibly intercept
> these from
> > getting in the queue and maybe even find and delete the ones that are
> in the
> > queue now based on some common content?
> >
> > Please reply off list to webtent@yahoo.com, mail delivery is slowed to a
> > crawl with the huge queue.
>
>
>To prevent such "attacks"
>
>http://www.postfix.org/BACKSCATTER_README.html
>
>
>To clean the queue
>
>http://sbserv.stahl.bau.tu-bs.de/~hildeb/postfix/scripts/
>
>Be sure that there is really no virus sender among your customers.

In addition to the BACKSCATTER_README, most "virus warning" email can be
rejected using postfix header_checks or body_checks. This is useful only
if you have egress filtering so that it's unlikely any of your users really
sent a virus.

A list of header_checks can be found at:
http://www.t29.dk/antiantivirus.txt

-- 
Noel Jones 
-------------------------------------------------------
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now. 
http://productguide.itmanagersjournal.com/
_______________________________________________
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/


[ About Guardian Digital ] - [ Press Center ] - [ Contact Us ] - [ System Activation ] - [ Reseller Info ] - [ Online Store ] - [ Site Map ]
Copyright (c) 2000 - 2004 Guardian Digital, Inc. Linux Lockbox and EnGarde are Trademarks of Guardian Digital, Inc.