<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
<title></title>
</head>
<body bgcolor="#ffffff" text="#330099">
<br>
Hello,<br>
<br>
Yes it seems the Sober worm is nasty, i have a qmail implementation
with greylisting and we're doing a scan with ClamAV before it gets to
the greylisting so virus mails are not making it that far
(incoming)... however, i did just this morning receive a notice from a
user unable to send out mail through our server now because we also
have a RBL check installed.. the user's IP got blacklisted because
their computer is infected.<br>
<br>
I suspect that you may have some machines/users infected with Sober
unfortunately. For more info check out:<br>
<a class="moz-txt-link-freetext" href="http://cbl.abuseat.org/nat.html">http://cbl.abuseat.org/nat.html</a> <br>
<a class="moz-txt-link-freetext" href="http://securityresponse.symantec.com/avcenter/venc/data/w32.sober.removal.tool.html">http://securityresponse.symantec.com/avcenter/venc/data/w32.sober.removal.tool.html</a><br>
<br>
Regards,<br>
Scot<br>
<br>
Brian Ross wrote:<br>
<blockquote cite="mid43BD5ACB.1040506@qualcomm.com" type="cite">The
maintenance interval *exploded* with the latest Sober worm. Originally
this was taking about 20 minutes. :(
<br>
<br>
We're still seeing ~13,000 copies of Sober.Z making it past the
greylist - you can only imagine what is getting blocked.
<br>
<br>
But yes, help does seem to be in order and unfortunately our in-house
DBAs are Oraclists and don't seem interested in tainting their purity
by touching MySQL. Perhaps I should just move the greylist DB to
Oracle.....
<br>
<br>
<br>
<br>
William Blunn wrote:
<br>
<br>
<blockquote type="cite">Brian Ross wrote:
<br>
<br>
<blockquote type="cite">Hello,
<br>
<br>
I was wondering if anyone has any performance tuning tips for the MySQL
db as implemented in relaydelay.
<br>
<br>
We're running the db_maintenance script regularly, expiring
approximately 1.25 million rows on a nightly basis with the maintenace
taking approximately 1.5 hours.
<br>
<br>
During the maintenance we're turning off our mail relays
<br>
</blockquote>
<br>
<br>
Turning off your mail relays for 1.5 hours every day?
<br>
<br>
You're swamped. Get professional help. Fast.
<br>
<br>
Bill
<br>
_______________________________________________
<br>
Greylist-users mailing list
<br>
<a class="moz-txt-link-abbreviated" href="mailto:Greylist-users@lists.puremagic.com">Greylist-users@lists.puremagic.com</a>
<br>
<a class="moz-txt-link-freetext" href="http://lists.puremagic.com/cgi-bin/mailman/listinfo/greylist-users">http://lists.puremagic.com/cgi-bin/mailman/listinfo/greylist-users</a>
<br>
</blockquote>
<br>
<br>
_______________________________________________
<br>
Greylist-users mailing list
<br>
<a class="moz-txt-link-abbreviated" href="mailto:Greylist-users@lists.puremagic.com">Greylist-users@lists.puremagic.com</a>
<br>
<a class="moz-txt-link-freetext" href="http://lists.puremagic.com/cgi-bin/mailman/listinfo/greylist-users">http://lists.puremagic.com/cgi-bin/mailman/listinfo/greylist-users</a>
<br>
<br>
<br>
</blockquote>
<br>
</body>
</html>