Re: Mail Issues (was [LUG] OpenSSH Vunrability)

[Theo Zourzouvillys <theo@xxxxxxxxxxxxxxxx>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Wednesday 26 June 2002 2:51 pm, Theo Zourzouvillys wrote:

> X-AnlX-Virus-Scan: No viruses found, Definitions updated Wed Jun 26 14:30:02 
BST 2002
> X-Notnet-Virus-Scan: No viruses found, Definitions updated Wed Jun 26 
14:30:11 BST 2002
> X-Virus-Scanned: by AMaViS perl-11

hmmmmmm.

this just gave me an idea, that could be useful.  Mail passes between mail 
servers, and gets scanned in my case ohh to many times, each time wasting CPU 
usage on the mail server in question, when all it really needs is one scan.

how about some sort of system with a colabaritive list of mail servers peers 
that scan mail for viruses and admins trust, and each one adds the mail 
signature in some way to the headers, saying it's been scanned and is clean, 
if the down/upstream mail server recognises it, it skips the scan.

It has a fair few flaws - people running servers may keep definaitions out of 
date, or not extract mime mails properly and miss viruses, etc, etc..

but could be useful, maybe, just maybe. thinking about it a bit more, maybe 
it's a silly idea :p) i've spent far to long on security upgrades this week 
to be in an even semi-same mood ;)

comments?

43 linux boxen, 3 solaris, and 4 BSD later, we're all apache and ssh upgraded. 
yay.

ohh joy, i forgot to do my home box. time to do that one ;)

and i've started to see lots of probes on port 22 on our networks, 6 this 
morning so far - way more than normal.

~ Theo

- -- 

Theo Zourzouvillys
http://zozo.org.uk/

You are sick, twisted and perverted.  I like that in a person.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.7 (GNU/Linux)

iD8DBQE9Gcoq448CrwpTn6YRAuV4AJ41wePx7r5IDOL4d2FfRQqlTDEEbQCg83aY
4o9a4p8ivtmWePhE0azr6Q4=
=kJch
-----END PGP SIGNATURE-----


--
The Mailing List for the Devon & Cornwall LUG
Mail majordomo@xxxxxxxxxxxx with "unsubscribe list" in the
message body to unsubscribe.