Re: Reducing Load on Amavisd-new/Spamassassin/Antivir

From: Alexander Dalloz (ad+lists_at_uni-x.org)
Date: 03/02/05

  • Next message: Douglas Frank: "RH9 laptop 2.4->2.6: it's up! (no mouse though)" 
    To: For users of Fedora Core releases <fedora-list@redhat.com>
Date: Wed, 02 Mar 2005 18:16:45 +0100

    Am Mi, den 02.03.2005 schrieb Dale Sykora um 18:00:

    > Alexander,
    > This thread caused an idea to pop into my head. What if virus scanners
    > would digitally sign outgoing messages as virus free such that incoming
    > mail handlers could verify the message+signatures and not have to scan
    > for virii? Then active lists like fedora-list could scan once at the
    > server and all the recipients would only have to check the signature.

    > Dale

    The idea is not that bad, to rely on a trusted central virus scanning
    service. On the other hand, while speaking about mailing list, I would
    really wish all would catch out virus / worm mails and not let them go
    through to the subscribers, rather than to just tag them as clean or
    infected. Red Hat handles this pretty well I feel while for instance
    through the Cyrus lists spam and I think even worms are getting through.
    The problem with your idea about tagging mail as clean is that "the bad
    side" will fake such signatures. So in general it is no good idea to
    trust mail header tags in general like mail body signature strings.
    While saying that, I believe to remember that DSPAM is using signatures.
    But as I never used that tool I can't say how they operate with them and
    how reliable such a sig is.

    Alexander 

    -- 
Alexander Dalloz | Enger, Germany | GPG http://pgp.mit.edu 0xB366A773
legal statement: http://www.uni-x.org/legal.html
Fedora Core 2 GNU/Linux on Athlon with kernel 2.6.10-1.14_FC2smp 
Serendipity 18:06:03 up 9 days, 5:14, load average: 0.08, 0.22, 0.29 



    


    -- 
fedora-list mailing list
fedora-list@redhat.com
To unsubscribe: http://www.redhat.com/mailman/listinfo/fedora-list
  • Next message: Douglas Frank: "RH9 laptop 2.4->2.6: it's up! (no mouse though)"

    Relevant Pages

    • [Full-disclosure] [FLSA-2006:185355] Updated gnupg package fixes security issues
      ... Fedora Legacy Update Advisory ... An updated GnuPG package that fixes signature verification flaws is now ... GnuPG is a utility for encrypting data and creating digital signatures. ... where is a list of the RPMs you wish to upgrade. ...
      (Full-Disclosure)
    • [FLSA-2006:185355] Updated gnupg package fixes security issues
      ... Fedora Legacy Update Advisory ... An updated GnuPG package that fixes signature verification flaws is now ... GnuPG is a utility for encrypting data and creating digital signatures. ... where is a list of the RPMs you wish to upgrade. ...
      (Bugtraq)
    • Re: cDc prepares user-friendly stego app!
      ... > scan the webpage for stegged content using your signature and password. ... > it is more likely to have a virus -- which is simply stupid. ... > about a bunch of lies and innuendo just because you can. ...
      (comp.security.misc)
    • Re: Swen annoyances to everyone: wakeup call
      ... LiveUpdate on 9/19 and 9/20 it indicated no new signature ... >| many mail delivery failure messages can infect you. ... The Sobig.F virus was eventually (after ... >| Sobig.F (or the related mail delivery failure messages). ...
      (microsoft.public.security)
    • Re: Antivirus
      ... ceased to be amazed at the attitude some Windows users seem to have. ... call me in desperation upon having one of those programs let a virus through. ... signature, and hopefully you weren't infected by then. ... And you are at the whims of what the AV vendor defines as a threat. ...
      (Ubuntu)
    Loading