Snort mailing list archives

Re: SMTP Virus Gateway


From: joshua.james () steritech com (Joshua James)
Date: 14 Jun 2002 12:04:04 -0400

On Fri, 2002-06-14 at 11:39, Madziarczyk, Jonathan wrote:
Hey all,
 
  So I've got my snort rules set up to alert on possible Klez Viruses (as
well as other e-mail transferred viruses, like Code Red, etc).  That seems
to be working pretty well.  As expected, I do seem to be missing some resets
via flexresp and I'd prefer not to use it anyway just to avoid blocking
false positives.  Is there a product out there that works well at blocking
inbound/outbound viruses on e-mail?  I'm trying to find something that works
on both straight SMTP (unix and listservs) and ESMTP (Exchange).  So what do
the experts (you) recommend?

NOT Norton AntiVirus gateway. I can't speak for anything except the
version I use but if the company handles any other version the same way
I'd stay away. Both SirCam and Klez come right through. I already had to
upgrade once for SirCam, I'm not doing it again. I need to find a new
product as well.


_______________________________________________________________

Don't miss the 2002 Sprint PCS Application Developer's Conference
August 25-28 in Las Vegas - http://devcon.sprintpcs.com/adp/index.cfm?source=osdntextlink

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: