The mailing list for listmasters using Sympa

["Darryl Ross" <address@concealed>]

> I see a lot of messages going to list command addresses (-subscribe,
> -unsubscribe) that are actually generated by Klez and other worms, which
> tends to cause problems like subscribing innocent people (for
> non-confirmation lists) or mysterious "could not unsubscribe" messages
> for innocent people, especially since the worm spoofs its From: line.
> This is despite running antivirus software (RAV) that successfully
> rejects virus messages sent to the lists themselves.
>
> So apparently the virus check is done only when the message is on its
> way to a list, and not immediately upon reception of any message by
> sympa.  Could the virus check be moved to an earlier point in the
> process?

At our site we run qmail, and are using the qmail-queue patch so that ALL
incoming mail is virus scanned (using F-Secure) before it even knows
whether it's for a mailing list or for a staff member (we run our lists on
the same machine as our staff email).

Perhaps that would be a better option? I'm pretty sure sendmail can do the
same (via milter?) but I'm not sure about postfix or exim...

-- 
Darryl Ross
Enterprise Systems Administrator
Service to Youth Council Inc
address@concealed