|
|
|
|
|
|
|
|
|
|
|
|
|
|
How to protect your Domino servers from Sobig.F (continued)
Create a new rule that looks for the body or subject contains "SoBig" and a file extension with either ".pif" or ".scr". Have the rule change the mail status to "held" and then quarantine the message in another database for analysis. Figure C shows you how to configure the logic and actions to be performed by the rule. This is a wide net we're casting and if this article was emailed to you with the above rule enabled, it would be quarantined, so be sure to check your quarantine database regularly.
FIGURE C
 
Create a mail rule to quarantine SoBig bounced messages. Roll over picture for a larger image.
The server mail rules I have demonstrated should help keep many worms out of your users' mail boxes and will prep you with the knowledge you will need to fight similar outbreaks in the future.
Daniel Koffler is an R6 CLP and works as a Domino consultant for major organizations in North America and Europe, specializing in network design, security analysis and knowledge management, he is also the author of several OpenSource projects. Daniel can be reached at dkoffler@users.sourceforge.net
|
|
|
|
|
|
|
|
|
|
|
|
|
|
-- Advertisement --
Sophisticated Meets Simple For Document Management
Share. Control. Manage.
Documents, emails, and content in the context of how work is done.
Native to Lotus Domino. The User Experience unseen for Lotus Domino.
Do more with less. Really.
See the possibilities Docova unleashes for Lotus Domino. |
-- Advertisement --
Mark your calendar for in-depth Lotus training, May 12-14, Boston
Join experts and peers May 12-14 in Boston for educational and networking events that deliver real-world Lotus training so you can increase productivity and efficiency in your company, advance your skills, and squeeze the most from your current environment. One registration gets you into THE VIEW's Admin2010 and Lotus Developer2010.
Register by December 31 to save $350. |
|
|
|
|
|
|
|
|
|
|
