Educause Security Discussion mailing list archives

Re: Sobig Traffic


From: Greg Francis <francis () GONZAGA EDU>
Date: Mon, 8 Sep 2003 10:28:15 -0700

Our mail relays (two Linux servers) are stripping out the attachments
prior to their arrival at the Exchange servers. It saves a tremendous
amount of resources on the part of the Exchange servers and our other
internal mail servers.

Greg

Greg Francis                                Gonzaga University
Sr. System Administrator                    Spokane Washington
francis () gonzaga edu                         509-323-6896

On Mon, 8 Sep 2003, Barros, Jacob wrote:

Our exchange server is still getting hit with email messages containing
the Sobig.f virus. The viruses is being deleted but we're losing system
resources in the process.  Do any of you know if there is a way that I
can filter/block those messages before it hits the exchange server? Can
it even be done or should we just ride out the storm.  Am I on the wrong
track in thinking that this bug is on the outside and in fact may be
resident on one of our internal machines?

**********
Participation and subscription information for this EDUCAUSE Discussion Group discussion list can be found at 
http://www.educause.edu/cg/.

Current thread: