[Esa-l]Sendmail Distribution Lists

[Floyd Pierce]

There has been discussion on the list of how to check all outgoing
mail also. I'm interested in poisoning outgoing mail without the
overhead of the mime scanner. I think that in order to stop the
rampant slamming of huge chuncks of the internet sooner or later
everyone (whatever that means) will have to deal with checking
outbound mail.

We have (as I'm sure many of you have) a policy restricting the
use of e-mail for non-business uses. As such we poison mp3's, mpg's,
and a host of other filetypes that our users should not be sending.

Having the poisoning capability on outbound mail would be great for
us.

--
Floyd Pierce              | Director of Information Technology
Phone  847-790-2830 (IL)  | Box USA
Phone  817-783-2355 (TX)  | floydp at boxusa.com
Fax    847-790-2880       | floyd at floydbob.com




> -----Original Message-----
> From: esa-l-admin at spconnect.com [mailto:esa-l-admin at spconnect.com]On
> Behalf Of Leonard L. Goldenstein
> Sent: Thursday, July 26, 2001 8:41 AM
> To: Email Security Announce list
> Subject: [Esa-l]Sendmail Distribution Lists
>
>
> Hi all,
> With this whole sircam worm spread, we experienced one oddity that put a
> little egg on our face.
> As several companies do, we keep some distribution lists configured in
> sendmail.  These distro lists contain both internal e-mail addresses and
> also addresses for external people.  One external person
> unfortunately sent
> the sircam to a distro list on our system.  Sendmail expanded the list and
> attempted to deliver the sircam to all recipients in the list.  The local
> recipients were protected by John's excellent procmail script but
> the sircam
> was forwarded on to the external e-mail addresses listed in the
> distribution
> list.
>
> Now is there any way to do the procmail check before a
> distribution list is
> expanded?  Might save some people a little embarrassment in the future :)
>
> -----------------------------------------------------
> Leonard L. Goldenstein
> Information Services Consultant
>
> Geo. H. Young & Co. Ltd.
> 809 - 167 Lombard Ave.
> Winnipeg, MB R3B 3H8
> Phone: (204) 947-6851
> Fax: (204) 947-3306
>
> len at ghy.com
> http://www.ghy.com
> _______________________________________________
> E-mail Security Announce list mailing list
> E-mail Security Announce list at spconnect.com
> http://www.spconnect.com/mailman/listinfo/esa-l