Guardian Digital Inc. >
InfoCenter >
Mailing List Archives >
Amavis
Amavis Mailing List Archive
At 01:21 PM 12/15/04, lst_hoe01@kwsoft.de wrote:
>Zitat von Robert Fitzpatrick <robert@webtent.com>:
>
> > I have over 10000 messages in the Postfix queue running amavisd-new 2.2.0
> > thanks to a virus.
> >
> > These messages are return messages basically telling users they tried
> to send
> > a virus, which I'm sure most did not. How can I possibly intercept
> these from
> > getting in the queue and maybe even find and delete the ones that are
> in the
> > queue now based on some common content?
> >
> > Please reply off list to webtent@yahoo.com, mail delivery is slowed to a
> > crawl with the huge queue.
>
>
>To prevent such "attacks"
>
>http://www.postfix.org/BACKSCATTER_README.html
>
>
>To clean the queue
>
>http://sbserv.stahl.bau.tu-bs.de/~hildeb/postfix/scripts/
>
>Be sure that there is really no virus sender among your customers.
In addition to the BACKSCATTER_README, most "virus warning" email can be
rejected using postfix header_checks or body_checks. This is useful only
if you have egress filtering so that it's unlikely any of your users really
sent a virus.
A list of header_checks can be found at:
http://www.t29.dk/antiantivirus.txt
--
Noel Jones
-------------------------------------------------------
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now.
http://productguide.itmanagersjournal.com/
_______________________________________________
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/
|