Educause Security Discussion mailing list archives

Re: Sobig Traffic


From: "Hahn, Jacob" <jhahn () MONTANA EDU>
Date: Tue, 9 Sep 2003 20:49:41 -0600

We use Antigen as virus software and you can stop the messages with the
Internet Scan Job, which removes the infection before it gets to the mail
box. It is also known as the Antigen Internet Mail Connector.



Jacob Hahn
MCSE Windows 2000, MCP, CCA
Information Technology Center
Montana State University - Bozeman

Web: http://www.montana.edu/wwwitc/

-----Original Message-----
From: Barros, Jacob [mailto:jkbarros () GRACE EDU]
Sent: Monday, September 08, 2003 10:51 AM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] Sobig Traffic

Our exchange server is still getting hit with email messages containing
the Sobig.f virus. The viruses is being deleted but we're losing system
resources in the process.  Do any of you know if there is a way that I
can filter/block those messages before it hits the exchange server? Can
it even be done or should we just ride out the storm.  Am I on the wrong
track in thinking that this bug is on the outside and in fact may be
resident on one of our internal machines?

**********
Participation and subscription information for this EDUCAUSE Discussion
Group discussion list can be found at http://www.educause.edu/cg/.

**********
Participation and subscription information for this EDUCAUSE Discussion Group discussion list can be found at 
http://www.educause.edu/cg/.

Current thread: