Results 1 to 5 of 5

Thread: Filter SoBig worm at server

Hybrid View

  1. #1

    Filter SoBig worm at server

    I am running Sendmail as my mail server and I was wondering if anybody knows a way to block the SoBig worm at the server so users don't have to download all of the messages and then delete them.

    Thanks for any help.

  2. #2
    Mentor
    Join Date
    May 2001
    Location
    New Jersey
    Posts
    1,473

    Re:Filter SoBig worm at server

    could you block mail by the subject in send mail? i dont know i'm not familiar with it.

    The first thing i would block is the file extensions .pif and .scr


  3. #3

    Re:Filter SoBig worm at server

    I am not sure if you can block by by subject or body from Sendmail.
    Any chance you know of a good tutorial for block certain file extensions? I have been looking but I haven' really found anything that suits my purposes.

    Thanks.

  4. #4

    Re:Filter SoBig worm at server

    One more thing. I am not worried about users running the attachment, my concern is the volume of mail coming in. I would rather just completely dump all the worm emails emails.

    Maybe drop all emails with "See the attached file for details" in the body.

  5. #5
    Senior Member
    Join Date
    Sep 2002
    Posts
    421

    Re:Filter SoBig worm at server

    There's no one phrase in the subject or body of the SoBig mails that could unambiguously identify it as unwanted mail. Filtering for "See the attached file for details" could very well generate false positives as could filtering for the subject line this worm uses.

    Your best bet is to run spamassassin. This is a very powerful spam filter that - provided you spend some time creating your set of rules - filters out most of your spam and viruses without generating false positives.

    I do realize that this probably doesn't help you right away with the flood of SoBig mails you're getting at the moment but I really don't see any ad hoc method that would work reliably.

Similar Threads

  1. How to set message filter in mail server?
    By shimul in forum Linux - Hardware, Networking & Security
    Replies: 1
    Last Post: 07-16-2011, 10:10 PM
  2. spamassin spam filter
    By doggiebone in forum Mandriva
    Replies: 1
    Last Post: 01-18-2007, 05:28 AM
  3. SQL Worm
    By mmiller9 in forum Linux - Software, Applications & Programming
    Replies: 11
    Last Post: 01-28-2003, 03:17 AM
  4. BlackHole Spam/Virus Filter 1.0.0
    By cloverm in forum Linux - Software, Applications & Programming
    Replies: 0
    Last Post: 09-27-2002, 03:51 PM

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •