Antivirus for (mailservers on) FreeBSD

[Brad Knowles]

At 10:16 PM -0400 2003/06/12, Bill Moran wrote:

>  Additionally, you want to scan ALL emails for malware, so if something
>  sneaks in off a floppy or something it doesn't run rampant throughout
>  the company email system,

	True.

>                            while scanning outgoing emails for spam is
>  simply a waste of CPU cycles.

	False.  You can be held liable (including criminal liability) if 
you could have reasonably prevented something like this, and chose 
not to.  Moreover, the damage to your reputation for being known as 
someone infecting other people with viruses/worms/Trojan 
Horses/etc... could be incalculable.

	What is different about outgoing vs. incoming e-mail, with 
respect to viruses, is that you always want to inform the internal 
person that a message with a suspected virus was found, and you may 
(or may not) want to inform the outside people.  In one case, the 
insiders are the recipients, in the other case, they are the 
sender(s).

	Also, if you catch all outbound e-mail, then you stop virus 
floods before they start (assuming they're recognized).

-- 
Brad Knowles, <brad.knowles at skynet.be>

"They that can give up essential liberty to obtain a little temporary
safety deserve neither liberty nor safety."
     -Benjamin Franklin, Historical Review of Pennsylvania.

GCS/IT d+(-) s:+(++)>: a C++(+++)$ UMBSHI++++$ P+>++ L+ !E-(---) W+++(--) N+
!w--- O- M++ V PS++(+++) PE- Y+(++) PGP>+++ t+(+++) 5++(+++) X++(+++) R+(+++)
tv+(+++) b+(++++) DI+(++++) D+(++) G+(++++) e++>++++ h--- r---(+++)* z(+++)