WORMS, Wurms, Crawling BUGS!

Discussion in 'Tips/Tricks/Mods' started by Morons, Oct 24, 2006.

  1. Morons

    Morons Member

    I still experience some worms have free roaming through the server like the w32.stration :mad:
    What is there to do about these worms?
  2. sjau

    sjau Local Meanie Moderator

    Well, w32.stration won't do any harm on a linux server... however clients that use windows and download email containing the worm may be harmed.

    Have you installed any antivirus scanner on your server?
  3. Morons

    Morons Member

    Is that not what CLAMAV and Freshclam is doing there?
    Freshclam updates the AV DB and ClamAV scan the mail for viri? Yes the Linux is not my concern, however the windows user connecting and fetching his mail is were the problems manifest!
  4. sjau

    sjau Local Meanie Moderator

    Clamav should actually delete the virus. However I think you have to pipe the mail through the clamav scanner. I don't think it does it automatically... well, I'm not using any anti-virus software on my email server so I can't tell for sure.
  5. till

    till Super Moderator Staff Member ISPConfig Developer

    If you use ISPConfig, you will just have to enable the "Antivirus" checkbox in the settings of the mail user and ISPConfig will pipe all mail trough ClamAV.
  6. Morons

    Morons Member

    Yes it does, and it is enabled, however these specific Worms still pass into maiboxes, Most others get caught, these actually pass through.

    Plse google for:


    althow the [email protected] is called Worm.Stration.A (ClamAV), some strains lately does not get caught. I did an /home/admispconfig/ispconfig/tools/clamav/bin/freshclam and the resul was
    Witch meant that my ClamAV DB is fine!
  7. falko

    falko Super Moderator ISPConfig Developer

    It's possible that this worm is not in ClamAV's database yet. Although the ClamAV database contains most of the viruses/worms, it's still a project maintained by volunteers.

Share This Page