|
|
|
|
|
|
|
|
 |
 |
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] Re: [FW-1] AW: [FW-1] Virus not detected by Trend VirusWall
Put a Bastion SMTP server to do the SMTP RELAY reject and have it forward all incomming mail to the FW-1. Have the FW-1 accept SMTP connection only from the Bastion SMTP server and from your internal host. And because of THE REAL PROBLEM, which is than FW-1 Security server in FW-1 2000 only use the lowest MX record and than it's a mess to see and take action on what is in the spool directory waiting to be sent out, have the FW-1 forward all outgoing mail to the Bastion SMTP which will be the one which really send the mail out. If you have 100+ domains that should not be money problem. The other solution could be to write a small problem to automatically add all those *@domain. entries directly at the right place in the objects.c file. Or to add them manually if those doesn't change very frequently... At 14:18 2001-12-18 +0100, Mark Pace Balzan wrote: >Hi, > >I know this is not directly related to virus scanning, but more to CVP using >Trendmicro VirusWall > >What are you guys doing about the open relay issue on Checkpoint Secure SMTP >server ? > >I host 100+ domains so its hard to include them in the firewall resource >object config > > >Thanks in advance > > >Mark > > >----- Original Message ----- >From: "Frank Ziebarth" <[email protected]> >To: <[email protected]> >Sent: Tuesday, December 18, 2001 1:48 PM >Subject: [FW-1] AW: [FW-1] Virus not detected by Trend VirusWall > > >we had the same problem: the CVP scanner will not recognize a virus, but the >manual vscan tool recognize this virus. >After the update to the last version was it the same. >The answer from TrendMicro is: >--> >It is possible that the smtp viruswall daemon was not yet "reflash" that >time after the update, so it is still use the previous pattern. After >the >"reflash" the daemon will then use the latest available pattern file. ><-- > >Frank > >> -----Ursprüngliche Nachricht----- >> Von: Mailing list for discussion of Firewall-1 >> [mailto:[email protected]] >> Gesendet: Mittwoch, 12. Dezember 2001 12:50 >> An: [email protected] >> Betreff: Re: [FW-1] Virus not detected by Trend VirusWall >> >> >> Trend used to have some problems with the interscan viruswall engine..... >> specifically a file called ISSMTPD.EXE. there has been a couple >> of releases >> for this file to keep it up to date with the way that some polymorphic and >> stealth viruses act and change. >> You should be able to get update for their products from >> ftp.trendmicro.co.uk <ftp://ftp.trendmicro.co.uk> >> Or try www.sd.co.za/ftp/ <http://www.sd.co.za/ftp/> >> >> >> mika >> >> -----Original Message----- >> From: Elmar van Mourik [SMTP:[email protected]] >> Sent: 12 December 2001 12:27 >> To: [email protected] >> Subject: [FW-1] Virus not detected by Trend VirusWall >> >> Hi all! >> >> I'm running FW-1 4.1 with Trend Viruswall CVP. >> Sometimes the CVP scanner does not recognize a virus in an >> attachement or >> does not block on the extension. >> Has anyone had this problem before or knows the solution? >[..] > >================================================= >To unsubscribe from this mailing list, >please see the instructions at >http://www.checkpoint.com/services/mailing.html >================================================= >To set vacation, Out Of Office, or away messages, >send an email to [email protected] >in the BODY of the email add: >set fw-1-mailinglist nomail >================================================= >If you have any questions on how to change your >subscription options, email Ron Alcatraz at: >[email protected] >================================================= > >================================================= >To unsubscribe from this mailing list, >please see the instructions at >http://www.checkpoint.com/services/mailing.html >================================================= >To set vacation, Out Of Office, or away messages, >send an email to [email protected] >in the BODY of the email add: >set fw-1-mailinglist nomail >================================================= >If you have any questions on how to change your >subscription options, email Ron Alcatraz at: >[email protected] >================================================= > ------------------------------------------------------------ Yves Belle-Isle V.P. VE2YBI YB17 Email: [email protected] Responsable des Systemes Tel:Sogi Informatique Ltee. Fax:------------------------------------------------------------ ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= To set vacation, Out Of Office, or away messages, send an email to [email protected] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= If you have any questions on how to change your subscription options, email Ron Alcatraz at: [email protected] =================================================
|
||||||||||
 |
 |
 |
 |
 |
 |
 |
 |
 |
|
