689
edits
Changes
From SME Server
Jump to navigationJump to search
mLine 1:
Line 1: − + − + Line 9:
Line 9: − + Line 276:
Line 276: − Line 284:
Line 283: + − Here is a link to an earlier [http://mirror.contribs.org/smeserver/contribs/rmitchell/smeserver/howto/Virus%20and%20file%20blocking%20HOWTO%20using%20smtpfront-qmail%20for%20sme%20server.htm old HowTo] written for sme6.x.+ − Please disregard all references to installing rpms as this does not apply to sme 7.x.+ − + + +
Minor amendments
{{Level|Advanced}}
{{Level|Advanced}}
== Virus & Executable content blocking tutorial for qpsmtpd ==
==Email Attachments Virus & Executable content blocking==
The functionality to block possible executable and virus files attached to emails has been incorporated into sme server v7.0 and more recent versions. See the [[SME_Server:Documentation:Administration_Manual:Chapter13#E-mail_Filtering|Email]] panel in server manager.
The functionality to block possible executable and virus files attached to emails has been incorporated into SME Server v7.x. See the [[SME_Server:Documentation:Administration_Manual:Chapter13#E-mail_Filtering|Email]] panel in server manager.
===Problem===
===Problem===
This functionality allows incoming and outgoing messages to be rejected if the attached file has executable content, which matches specific file type patterns. A default pattern matching database is created with common executable file patterns, which cover the majority of currently known Windows type executable viruses. Patterns can be created for any file types to allow multimedia or other attachments to be rejected where the system management policy considers it appropriate.
This functionality allows incoming and outgoing messages to be rejected if the attached file has executable content, which matches specific file type patterns. A default pattern matching database is created with common executable file patterns, which cover the majority of currently known Windows type executable viruses. Patterns can be created for any file types to allow multimedia or other attachments to be rejected where the system management policy considers it appropriate.
Email messages are rejected if the attachment content matches an entry in the patterns database. By default this includes the majority of *.exe files, older v1.0 *.zip files and some *.gif files. This blocking applies to both incoming and outgoing smtp email messages, including the local network, in order to stop virus propagation. If these file types need to be sent using email, they should be compressed using WinZip (v2.0 format) or WinRAR or other suitable compression software, or alternatively shared on the local network use filesharing. Note that recent releases of compression software use the v2.0 zip format.
Email messages are rejected if the attachment content matches an entry in the patterns database. By default this includes the majority of *.exe files, older v1.0 *.zip files and some *.gif files. This blocking applies to both incoming and outgoing smtp email messages, including the local network, in order to stop virus propagation. If these file types need to be sent using email, they should be compressed using WinZip (v2.0 format) or WinRAR or other suitable compression software, or alternatively shared on the local network use file sharing. Note that recent releases of compression software use the v2.0 zip format.
Messages with attachments that match the patterns database are rejected by the mail system, and as a result there is no further processing. In practice a large number of virus infected messages will be rejected, perhaps 95 % or more, depending on the type of virus infections you receive and your system exposure (email addresses).
Messages with attachments that match the patterns database are rejected by the mail system, and as a result there is no further processing. In practice a large number of virus infected messages will be rejected, perhaps 95 % or more, depending on the type of virus infections you receive and your system exposure (email addresses).
===Web sites for background information===
===Web sites for background information===
These links may be of interest. Note that they do not specifically apply to SME Server, so DO NOT implement them. They are listed for background information only.
These links may be of interest. Note that they do not specifically apply to SME Server, so DO NOT implement them. They are listed for background information only.
===Prior version of this Howto for sme6.x===
===Prior version of this Howto for sme6.x===
Here is a link to an earlier [http://mirror.contribs.org/smeserver/contribs/rmitchell/smeserver/howto/Virus%20and%20file%20blocking%20HOWTO%20using%20smtpfront-qmail%20for%20sme%20server.htm old HowTo] written for sme6.x.
{{Note box| Disregard all references to installing rpms as this does not apply to SME 7.x.
There are some small changes in database arrangement between the older sme6.x db and the sme7.x db. Note also that there are many additional patterns in sme7.x. Note also that sme7.x uses qpsmtpd instead of smtpfront-qmail.
There are some small changes in database arrangement between the older SME 6.x db and the SME 7.x db.
There are many additional patterns in SME 7.x. Note also that SME 7.x uses qpsmtpd instead of smtpfront-qmail.}}
----
----
