[I offer the following *as is* w/ no further explanation.  I had recently
sent this to another correspondent.]

 >help me out.  What kind of anti-virus setup are you using to scan
 >messages and attachments arriving at your LISTSERV for distribution?

--

First and Foremost, we use LISTSERV(R) brand mailing list management
software.  We have configured it (relative to security) as such, which
allows us to better ameliorate spam and virus/worms:

ADMINISTRATION of USA Financial Aid Offices

Subscription= Open,CONFIRM Reply-To= SENDER,Respect
Confirm-Delay= 71 h
Send= PRIVATE           Confidential= No        Review= owner
Validate= NO            Language= NOHTML
Attachments= No
Default-options= Repro,Short,Review
Filter= Also,*postmast*@*,*postmstr*@*,*maiser*@*,*nobody*@*
Renewal= 3-monthly,Delay(7),Probe
Sizelim= 200

This translates into:

One must subscribe in order to be allowed to post to the list

One can only subscribe by going through a process: customer "asks" our
software to subscribe, our software acknowledges that request by
returning a pseudo random number to the requester, the requester returns
that PRN back to our software and is successfully subscribed

Subscribers can not get a list of other list subscribers, unless the
latter post to the list

List does NOT permit non-text attachments e.g., NO .WDP, .EXE, JPG, .XLS,
.VCARD

We limit per message size to 200 lines

List distributions "default" REPLY-TO: the poster, and not the list (this
isn't fool-proof)

New subscribers are automatically moderated, though by manual
intervention, we do turn off moderation for all .EDU subscribers; all
others must "prove" themselves (within our target audience) in order to
post w/o moderation

Multiple list-owners are defined and we encourage the use of the generic
list-owner address of [log in to unmask]; list-owners
coordinate their activities so that mail to the generic address is
answered a timely fashion

One of its "secondary" features is an inter-connected network of peered
(list) servers and it maintains an anti-spam feature among themselves, as
close to real-time as a store-n-forward network will allow.

Our institution has both centralized and distributed security,
information, and network offices/personnel.  We highly encourage, and
provide licenses (some no-charge, others costs) and WEB sites for A/V software.

See also:

http://www.emoderators.com/moderators/how2list.html

/Pete Weiss
Sr. Systems Engineer -- Penn State


At 09:56 01/16/2001 Tuesday,
 >Our state and regional organizations are looking at what can be done for our
 >list serves to combat virus transfers.
 >
 >Would you mind sharing more information regarding what you do and other
 >possible resources we can investigate along these lines?