Snort mailing list archives
Re: SMTP Virus Gateway
From: joshua.james () steritech com (Joshua James)
Date: 14 Jun 2002 12:04:04 -0400
On Fri, 2002-06-14 at 11:39, Madziarczyk, Jonathan wrote:
Hey all, So I've got my snort rules set up to alert on possible Klez Viruses (as well as other e-mail transferred viruses, like Code Red, etc). That seems to be working pretty well. As expected, I do seem to be missing some resets via flexresp and I'd prefer not to use it anyway just to avoid blocking false positives. Is there a product out there that works well at blocking inbound/outbound viruses on e-mail? I'm trying to find something that works on both straight SMTP (unix and listservs) and ESMTP (Exchange). So what do the experts (you) recommend?
NOT Norton AntiVirus gateway. I can't speak for anything except the version I use but if the company handles any other version the same way I'd stay away. Both SirCam and Klez come right through. I already had to upgrade once for SirCam, I'm not doing it again. I need to find a new product as well. _______________________________________________________________ Don't miss the 2002 Sprint PCS Application Developer's Conference August 25-28 in Las Vegas - http://devcon.sprintpcs.com/adp/index.cfm?source=osdntextlink _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- OT E-mail Viruses Madziarczyk, Jonathan (Jun 14)
- Re: SMTP Virus Gateway Joshua James (Jun 14)
- Re: SMTP Virus Gateway Joe Matusiewicz (Jun 14)
- Re: SMTP Virus Gateway Ralf Hildebrandt (Jun 14)
- Re: SMTP Virus Gateway Joshua James (Jun 14)