Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people, just like you, are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
Solved

*** E-MAIL viruses : restrict send/receive

Posted on 1997-09-18
4
239 Views
Last Modified: 2010-03-18
How to forbid Windows PPP users (connected to a Linux Intranet server running sendmail ) from sending viruses within e-mail to other users ?
0
Comment
Question by:sitel
4 Comments
 
LVL 2

Expert Comment

by:jeffa072897
ID: 1586599
I've seen data from McAfee that would do it but.... you have to
put a second system in between the mail server and the network. If you're tight on IP Addresses this may not be for you.
It looks like -

Origional    

Network      Linux Box     PPP Client
            +---------+    +---------+
------------+         +----+         +
            +---------+    +---------+



Network       McAfee        Linux Box     PPP Client
            +---------+    +---------+    +--------+
------------+         +----+         +----+        +
            +---------+    +---------+    +--------+

Maybe this could help.

0
 

Expert Comment

by:jclifford
ID: 1586600
McAfee have released a version of their VirusScan product for Linux which you could call from sendmail passing the attachments for checking.

However given that sendmail is already an enormously complecated beast I would recommend that you set up a separate machine whose wole function is to accept smtp, check it for viruses and pass it on for processing.

There are a number of advantages to doing it this way. You do not waste processing time on your mail hub, you can quarantine any virus infected files you do find, etc..

There are several commercial products which do this including Interscan VirusWall (the one I use), Dr Solomon's Mailgate, the excellent Mimesweeper, and Macafees offering which is a $7000 Linux PC with their anti-virus product installed.
0
 
LVL 2

Accepted Solution

by:
eckspurt earned 100 total points
ID: 1586601
Keep in mind that what we're calling viruses here are really trojan horses.  The recipient has to receive an e-mail with a malicious attachment and *decide to run* that attachment.  The only exceptions being where someone else has configured a user's e-mail package very stupidly, as Microsoft has been known to do.

You can *try* to scan for viruses that are in e-mail attachments, but your users can attach files according to so many different schemes, with so many different encodings, that you're fooling yourself to think you can really stop them.  You might succeed in blocking them from using standard attachments *at all*, or allow only text attachments, but that would not be secure in the least.  

What you can do is make sure your sendmail is configured so that it will only accept connections from authorized users.  You should definitely do that to prevent random spammers from making their junk mail look like it comes from your site.

For some of the best insights into Internet security issues, visit the

http://www.cert.org/
http://www.ncsa.com/virus/
http://techweb.cmp.com/iw/567/67mtsec.htm

sites.  Note that *all* of the e-mail viruses on the ncsa.com alerts page are hoaxes.  Basically anyone who tells you a firewall can block e-mail trojan horses has either been misled or is trying to sell you something.


0
 

Author Comment

by:sitel
ID: 1586602
OK. But how to configure Linux to reject mail that include attachments (or that include non-text attachments ?)
0

Featured Post

Connect further...control easier

With the ATEN CE624, you can now enjoy a high-quality visual experience powered by HDBaseT technology and the convenience of a single Cat6 cable to transmit uncompressed video with zero latency and multi-streaming for dual-view applications where remote access is required.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

I have seen several blogs and forum entries elsewhere state that because NTFS volumes do not support linux ownership or permissions, they cannot be used for anonymous ftp upload through the vsftpd program.   IT can be done and here's how to get i…
Note: for this to work properly you need to use a Cross-Over network cable. 1. Connect both servers S1 and S2 on the second network slots respectively. Note that you can use the 1st slots but usually these would be occupied by the Service Provide…
Nobody understands Phishing better than an anti-spam company. That’s why we are providing Phishing Awareness Training to our customers. According to a report by Verizon, only 3% of targeted users report malicious emails to management. With compan…
A short tutorial showing how to set up an email signature in Outlook on the Web (previously known as OWA). For free email signatures designs, visit https://www.mail-signatures.com/articles/signature-templates/?sts=6651 If you want to manage em…

792 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question