Problem with cyrus and deleting a message with a virus.

[Jules Agee]

mb/cyrus at dcs.qmul.ac.uk wrote:
> At 14:16 -0800 Jonathan Marsden wrote:
> 
> 
>>How about checking for viruses before mail reaches Cyrus?  Such as
>>with a virus scanner that runs as a milter which sendmail talks to
>>when it receives mail?  Or a similar approach for whatever your chosen
>>MTA is?
> 
> 
> Because (as mentioned elsewhere in this thread) lmtpd is not the only way 
> messages can be stored on an IMAP server: eg think of sending a poisoned 
> attachment, which magically ends up in your sent folder.

...where it would be relatively harmless anyway except to the 
already-infected local user...

Putting the virus scanner in your MTA not only greatly limits the 
possibility that computers accessing your Cyrus server will be infected 
in the first place, but also insures against the possibility of having 
locally infected computers sending virii to all your associates, 
clients, vendors, etc. (assuming that you block unauthorized outgoing 
SMTP at your firewall). IMHO the MTA is by far the best possible place 
to put a virus scanner.

-- 
Jules Agee
System Administrator
Pacific Coast Feather Co.
julesa at pcf.com      x284