On Saturday 20 March 2004 22:57, M Edwin wrote:
Hi all,
Recently one of my smtp user infected by windows virus. I use Sendmail 8.12 as MTA on SuSE 9.0. His account always send an email to the outside without knowing it(maybe to addresses in his address book). My Sendmail is alright, but I don't want to bother other server.
I use clamav for filtering incoming email, but can it work for outgoing email?
Can anyone here have a solution to block this thing.
TIA edwin
Your sendmail will fileter it if it is running clamav, but many of the viruses and works have their own smtp engine, so you should not allow port 25 outbound from your local net, forceing everyone to go thru your sendmail to get out. Do this with your firewall by specifically disallowing local to net on port 25, will still allowing the suse machine to use 25. -- _____________________________________ John Andersen