Koozali.org: home of the SME Server

Legacy Forums => General Discussion (Legacy) => Topic started by: Matt on January 28, 2004, 06:25:04 PM

Title: DOOM (myDOOM) Virus impacting E-Smith???
Post by: Matt on January 28, 2004, 06:25:04 PM

Dated Jan 27 2004, this is posting about a virus infecting UNIX mail systems:

http://winnetmag.com/articles/index.cfm?articleid=41567


Does this impact e-smith?


Thanks!

Title: Re: DOOM (myDOOM) Virus impacting E-Smith???
Post by: Gizzmo on January 28, 2004, 06:46:54 PM

Quote from: "Matt"

Dated Jan 27 2004, this is posting about a virus infecting UNIX mail systems:

http://winnetmag.com/articles/index.cfm?articleid=41567


Does this impact e-smith?


Thanks!

Well I've been testing my server for mail relaying all day yesterday, It seemed to pass fine and Clam seem to have stopped most emails. I think the main problem with most of these virus's are users and I am more concerned with people that bring there laptop's into work and put them on my network then the e-smith letting them in. Yesterday my Domain was hit with a lot of bogus emails, today seems to have come to almost a stop.

Title: Replaying test
Post by: Matt on January 28, 2004, 06:53:33 PM

How do I test for relaying?

Title: Re: Replaying test
Post by: Gizzmo on January 28, 2004, 06:59:30 PM

Quote from: "Matt"

How do I test for relaying?

http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=mail+relay+testing+

Some are shut down because of abuse, but i just went through google and ran a bunch of different ones.

Title: Thanks
Post by: Matt on January 28, 2004, 07:03:31 PM

Thanks for all that!  I appreciate your quick response.

 :)

Title: DOOM (myDOOM) Virus impacting E-Smith???
Post by: barryf on January 29, 2004, 10:47:52 AM

It doesn't actually say 'infecting' UNIX fileservers.  It only infects MS Windows computers.  It has affected my server - I put a screen on it, and every now and then delete the contents of /var/spool/amavis-ng/quarantine ;-)  I also turned off bouncing for unknown recipients, since the virus seems to make up the names for sender and recipient, most of the bounces were bouncing back again.

Title: DOOM (myDOOM) Virus impacting E-Smith???
Post by: Rigger on January 29, 2004, 11:22:38 PM

Quote from: "barryf"

It doesn't actually say 'infecting' UNIX fileservers.  It only infects MS Windows computers.  It has affected my server - I put a screen on it, and every now and then delete the contents of /var/spool/amavis-ng/quarantine ;-)  I also turned off bouncing for unknown recipients, since the virus seems to make up the names for sender and recipient, most of the bounces were bouncing back again.

How do you stop the server from bouncing the unknown recipients mail?

--
Doug M.
"Rigger"

Title: DOOM (myDOOM) Virus impacting E-Smith???
Post by: barryf on January 30, 2004, 10:18:52 AM

other e-mail settings

e-mail for unknown recipient - a choice of return to sender or forward to administrator