Great Circle Associates Majordomo-Users
(February 2001)
 

Indexed By Date: [Previous] [Next] Indexed By Thread: [Previous] [Next]

Subject: Re: Question about resend...
From: mjn <mjn @ umn . edu>
Date: Wed, 21 Feb 2001 10:23:53 -0600 (CST)
To: David Padilla <dpadilla @ sdsc . edu>
Cc: majordomo-users @ GreatCircle . COM
In-reply-to: <Pine.GSO.4.30.0102201553190.818-100000@multivac.sdsc.edu>

As of Feb 20, 2001, David Padilla can be held liable for saying:

> Mike -
> 
> I was wondering if you would share with us the name of the virus scanner
> you are using.  This sounds like something a lot of us would be
> interested in getting.  (Sorry I can't answer you question - I just don't
> know enough about majordomo yet.)
> 

We are currently using Guinevere in conjuction with our Groupwise 5.5
system:

http://www.indecon.com/guinevere/

We have a separate internet domain created for majordomo, with aliases for
all of our majordomo lists (listname and listname-owner), in Groupwise.  
With this configuration, all mail going to our lists goes through
Groupwise and thus gets scanned by default.  I am looking into restricting
delivery in sendmail to only our groupwise server and if anyone know where
I might find information on that, I'd be much obliged.

Guinevere doesn't do the actual scanning at all.  It is setup on a 98
machine with Command Anti Virus.  Basically, the 98 machine intercepts all
incoming and outgoing mail, hands it to the virus scanner, sends out
administrative messages/warnings if certain conditions are met, and
finishes by handing the message/messages back to your MTA.

Its nice because, not only can you grab viruses but you can look for
specifics patterns in headers (attachment names) which may not yet have
virus definitions, and act on them as you would any other virus.

It is not quite as extensible as MIME Sweeper but it isn't nearly as
expensive (something like $10-15k for MIME Sweeper(based on the number of
users) and only $500(per server) for Guinevere) either...

If anyone has other questions, I'd be more than happy to provide any
information I can.

____________________________
Mike Neuharth
ADCS Technology Specialist
http://www.umn.edu/adcs

E-Mail          : mjn@umn.edu
Page Mail       : 6126486512@page.metrocall.com
http://supermonkeycollider.dyndns.org/
____________________________






References:
Indexed By Date Previous: reason for duplicate messages?
From: Makiko Itoh <maki@prodok.com>
Next: Re: reason for duplicate messages?
From: Dan Liston <dliston@netscape.com>
Indexed By Thread Previous: Re: Question about resend...
From: David Padilla <dpadilla@SDSC.EDU>
Next: Re: Question about resend...
From: <cra@bigfatpipe.net>

Google
 
Search Internet Search www.greatcircle.com