Re: SCS v3.1.6MR6 - Internet Email

Calmail requires encryption for POP3, authenticated SMTP, and IMAP.
Encrypted connections to the mail server cannot be scanned by the virus
scanner anyway so this issue is of no consequence to Calmail users. If
you receive a virus infected email from Calmail or any other mail server
and you are running Symantec, it will be caught either when you try to
open it (provided auto-protect is active) or during the next scheduled
scan. Those who have had their entire inboxes quarantined know that this
can be frustrating, but protective.

Calmail scans email for viruses at the mail server. I would urge all
campus mail server admins to offer email virus scanning -- there are
free products available for this purpose.

Allison Henry
System and Network Security
University of California, Berkeley
http://security.berkeley.edu

OSL Tech wrote:
> After reviewing the readme file in the SCS v3.1.6MR6 package (yes
> some people do read them), I came across this little bit of info, the
> parts bolded are why I am emailing:
>
> ----------------------------------------------------- Internet E-mail
> Auto-Protect port changes are ignored
> ----------------------------------------------------- The antivirus
> client Auto-Protect feature for Internet E-mail Advanced Options lets
> you change the ports for POP3 and SMTP. The defaults for these ports
> are 110 and 25. The antivirus client ignores changes to these
> defaults. This issue applies to all email programs that use POP3 and
> SMTP, including Microsoft Outlook.
>
> If you change these defaults with the antivirus client but your email
> program uses the defaults, Auto-Protect still scans for risks in your
> email traffic. If your email program does not use the defaults and
> you change the Auto-Protect ports to match the ports used by your
> email program, Auto-Protect does not scan for risks in your email
> traffic.
>
> Am I understanding this correctly; if your email client (Outlook in
> my case) uses non-default internet mail ports ( as everyone on this
> campus has to in order to connect to CalMail), then Auto-Protect is
> NOT scanning for risks? This seems a bit on the crazy side to me.
> Please tell me I'm completely misunderstanding this.
>
>
> __________________________________________ Edgar Ortega Computer
> Resource Specialist Campus Life and Leadership - U. C. Berkeley
> (Formerly the Office of Student Life) 2515 Channing Way #12
> 510-643-0305 sastech_at_berkeley.edu
>
>
>
> ------------------------------------------------------------------------
> The following was automatically added to this message by the list
> server:
>
> To learn more about Micronet, including how to subscribe to or
> unsubscribe from its mailing list and how to find out about upcoming
> meetings, please visit the Micronet Web site:
>
> http://micronet.berkeley.edu/
>
> Messages you send to this mailing list are public and world-viewable,
> and the list's archives can be browsed and searched on the Internet.
> This means these messages can be viewed by (among others) your
> bosses, prospective employers, and people who have known you in the
> past.

------------------------------------------------------------------------
The following was automatically added to this message by the list server:

To learn more about Micronet, including how to subscribe to
or unsubscribe from its mailing list and how to find out
about upcoming meetings, please visit the Micronet Web site:

http://micronet.berkeley.edu/

Messages you send to this mailing list are public and world-viewable,
and the list's archives can be browsed and searched on the Internet.
This means these messages can be viewed by (among others) your bosses,
prospective employers, and people who have known you in the past.
Received on Fri Jul 13 2007 - 12:44:37 PDT