Messaging Gateway

 View Only
  • 1.  Virus Vs Blocked Sender Precedence

    Posted Nov 13, 2008 03:45 AM

    Hi All, 

    Apparently our system has been running just fine all the time, but in a while there is a host on my network, which has some virus or worm on his workstation, Due to it, i recieve a burst of about 400 worms in every 12 hours or so, thats not much of a problem with the paid Antivirus license for Mail security, 

    Then i thought that i would block him by the blocked Ip Sender list.

    I did that, but i checked the precedence list in the help file, which says that virus, worm etc. precede my blocked senders list.

    Now what i want to ask is since i know that this is a virus/worm sender, and my server spends a lot of processing in checking the virus for all the mails, is there any other way of blocking it completely, so my server dosen't waste processing power for every mail,

    One thing more, since we have an action of Reject SMTP connection, how can the gateway check for virus, before even making a connection? Please clarify 

    I suppose you got my problem, just ask me if you want more details

    Thanks in advance 



  • 2.  RE: Virus Vs Blocked Sender Precedence

    Posted Nov 13, 2008 10:27 PM

    I have this crazy idea...I think you can fix this "issue" by remediating the host that has the virus/malware

     

    :)

     



  • 3.  RE: Virus Vs Blocked Sender Precedence

    Posted Nov 14, 2008 01:05 AM
    That's definitely an option, but i was concerned about more of such hosts on the network Some hosts may even be running some kind of mailengine, so it directly communicates with my host. Is there any solution, which i can do at my end. Obviouly i can block that particular IP range but, then still there is a lot of processing done beforehand.
    Message Edited by vipinxing on 11-13-2008 10:06 PM