[I offer the following *as is* w/ no further explanation. I had recently
sent this to another correspondent.]
>help me out. What kind of anti-virus setup are you using to scan
>messages and attachments arriving at your LISTSERV for distribution?
--
First and Foremost, we use LISTSERV(R) brand mailing list management
software. We have configured it (relative to security) as such, which
allows us to better ameliorate spam and virus/worms:
ADMINISTRATION of USA Financial Aid Offices
Subscription= Open,CONFIRM Reply-To= SENDER,Respect
Confirm-Delay= 71 h
Send= PRIVATE Confidential= No Review= owner
Validate= NO Language= NOHTML
Attachments= No
Default-options= Repro,Short,Review
Filter= Also,*postmast*@*,*postmstr*@*,*maiser*@*,*nobody*@*
Renewal= 3-monthly,Delay(7),Probe
Sizelim= 200
This translates into:
One must subscribe in order to be allowed to post to the list
One can only subscribe by going through a process: customer "asks" our
software to subscribe, our software acknowledges that request by
returning a pseudo random number to the requester, the requester returns
that PRN back to our software and is successfully subscribed
Subscribers can not get a list of other list subscribers, unless the
latter post to the list
List does NOT permit non-text attachments e.g., NO .WDP, .EXE, JPG, .XLS,
.VCARD
We limit per message size to 200 lines
List distributions "default" REPLY-TO: the poster, and not the list (this
isn't fool-proof)
New subscribers are automatically moderated, though by manual
intervention, we do turn off moderation for all .EDU subscribers; all
others must "prove" themselves (within our target audience) in order to
post w/o moderation
Multiple list-owners are defined and we encourage the use of the generic
list-owner address of [log in to unmask]; list-owners
coordinate their activities so that mail to the generic address is
answered a timely fashion
One of its "secondary" features is an inter-connected network of peered
(list) servers and it maintains an anti-spam feature among themselves, as
close to real-time as a store-n-forward network will allow.
Our institution has both centralized and distributed security,
information, and network offices/personnel. We highly encourage, and
provide licenses (some no-charge, others costs) and WEB sites for A/V software.
See also:
http://www.emoderators.com/moderators/how2list.html
/Pete Weiss
Sr. Systems Engineer -- Penn State
At 09:56 01/16/2001 Tuesday,
>Our state and regional organizations are looking at what can be done for our
>list serves to combat virus transfers.
>
>Would you mind sharing more information regarding what you do and other
>possible resources we can investigate along these lines?
|