From: "Rod Gasson" 


"David Drummond" 
wrote in message
news:1081104053{at}f305.n640.z3.ftn...
> G'day Rod

G'day,

>  RG> I'm sure there'll be at least several hundred judging by the number
of
>  RG> viral related activity that hits our firwall on a daily basis.
>
> And that is where ours are stopped too.

:-)

> Mail is checked by an outside providor,

We handle most of our own mail, but a couple of the domains under our
control are handled by an offsite provider, mainly because it was under a
constant dictionary type attack. :-(

> We don't run anything virus related on the Linux machines...

We don't run virus checker as such, but we do run several different forms of
intrusion detection systems (monitoring for backdoors, rootkits, etc).

This came about because several years ago one of our users had his password
sniffed (by his school sysadmin) who then attempted to run several root
exploits on our servers.  Fortunately I just happened to be watching the log
files at the time, and managed to kick him before he was able to do too much
damage.  It wasn't long after that I decided that a good intrusion detection
system was going to save me hours of recovery should a similar thing happen
again.

Cheers
Rod












--- ifmail v.2.15