[ILUG] Sendmail issue.

[Ruairi Newman]

Hi all,

I have a problem I could do with a few pointers on.  I have been asked
to take a look at a box running Sendmail which acts as a mail relay for
a client.

The scenario is this:

The company have two boxen running Sendmail as their mx's.  

Relay1 relays all mails to a mimesweeper box which in turn processes
them and forwards to the (qpopper) POP server internally.  Mail with a
.vbs extension (don't ask!) that comes through this path arrives with
the .vbs encoded as base64 inline, and mimesweeper doesn't detect it. 
NAI anti-virus on the POP server doesn't detect the .vbs either at this
point.  The mail arrives in the users mailbox with the base64 encoded
.vbs quoted inline.

Relay2 relays mails directly to the POP server, which detects and strips
the .vbs successfully.

I'm told that getting rid of mimesweeper is not an option, and that
relay2 will shortly be pointed to the mimesweeper box too.

Any ideas what's happening in the relay1 stage?

ANY replies greatly appreciated,

Rgds,


-- 
Ruairi Newman
http://tech-mad.org/

"Anyone can build a fast CPU.  The trick is to build a fast system." -
Seymour Cray