anti virus 2

[kaancho12]

any recommendations on anit-virus software for mailserver on linux (redhat ES 3.0) ??? we are using sendmail....also if some other people get email with username that doesn't exist in our system does this mean that the server is compromised?
thanks
ko12

 

[lgarner]

I use Clam AV, which is pretty good. Trend Micro also has some Linux products for the commercial user.

I don't quite understand the second part. Who's getting the messages for the non-existent user? It could be a catchall mailbox, but normally such messages are rejected.

 

[kaancho12]

well we have several email accounts on our server such as: tim@server, jim@server etc....and I got an email from another webmaster saying that they got email from abc@server --but we do not have an account abc@server so i am guessing some spammer spoofed (not sure if this is the right term) the email address and sent email (along with virus attached) to them or the server is compromised by someone who is sending out spams and viruses. any idea?
thanks
ko12

 

[ericbrunson]

It's most likely the From: was forged, it's unbelievably simple to do. I wouldn't worry about it unless the Received: headers show that it actually originated from your server. If they do show it originated from your server, then you have to ask yourself how much you trust the other person to have not altered them. If you believe him, *then* I'd worry that your system was compromised.

 

[kaancho12]

hi,
thanks for your reply. the webmaster had sent me the header of the file that they received and although the name of the server is ours the ipaddress right after it is not. so i am pretty sure that some spammer spoofed it. hmmm...still though i guess i should look at setting up clamAV or some other antivirus.
thanks
ko12

 

[Trevoke]

That's not enough, you probably also need to set up something akin to spamassassin and, for instance, drop all emails that originate from non-existent usernames on your server and so forth.

-Haben sie fosforos?
-No tiengo caballero, but I have un briquet.

 

[TrojanWarBlade]

Grisoft AVG do a RedHat Linux anti virus product.

Dunno how good it is.




(very injured) Trojan.

 

[TrojanWarBlade]

Sorry, the link I just gave you was for updates. You can get the main code here




(very injured) Trojan.