[imp] Imp is running! now...

Rick Romero rick@valeoinc.com
Wed, 6 Dec 2000 09:33:51 -0600


On 6 Dec 2000, at 8:11, Tracy Bost wrote:

> Very happy here that Imp is happy and running quite well...Its set 
up on a linux box using
> sendmail as the MTA.. I was wondering if anyone on the list has 
any suggestions as a good 
> open source mailgateway filtering software or the like.

If you're using sendmail already, buy a sendmail book.  You can do 
just about anything with sendmail itself.  And if you need 
something extra, you can have sendmail spawn an external 
program.

In a past life I went through a lot of this on the Pegasus Mail 
(pegasus.usa.com) email list, attempting to remove any email that 
had a .vbs attachment.  (reason: who would actually send a useful 
vbs script via email, that can't zip it up?)

In that example, there was both an easy pseudo-fix, and a hard fix. 
 The easy fix (quick mod to sendmail.cf - which I did) would only 
catch a very basic attachment type.  The hard fix (calling an 
external app) would be able to catch anything.  

There is a LOT of information available on the net relating to 
sendmail security.  I collected info from IRC, dejanews, 
sendmail.com, and various personal websites.  

I always relate open source to free, which is what I've looked for in 
the past.

Basically I've been of no help, except that any free email 'scanning 
software' that I've seen isn't in on nice neat package.

Personally, I've come to rely mostly on removing vbscript.exe from 
all users pc's, and making sure all virus def's/engines are up to 
date.  As long as your virus software is scanning all new/modified 
files, you should discover any virus (not new) before it's actually 
executed.

Have fun!
Rick

> 
>   Thanks
> 


Rick Romero
IT Manager
Valeo, Inc.
rick@valeoinc.com
262-695-4841