"Martyn Drake" martyn@alug.org.uk writes:

Just to inform everyone that I've just installed Amavis along with Sophos Anti-Virus on the main Alug server to ensure that no nasty SirCam viruses (which yes, unfortunately, people are still sending to us) get out and about. I was sick of having to respond to people asking them to either install anti-virus software on their Windoze boxes or to get their definitions updated. Amavis responds automatically to infected senders to ensure they do keep their anti-virus software going.

Wouldn't it be rather simpler to use the common filter rules to trap and kill the worst offenders (eg SirCam) than it is to install a large insecure mail filter on your server? Fix the problems where they occur and 99% of virus problems are on the clients. Only when it reaches a DoS problem is server tweaking a good idea.