I'm pretty up on most of this anti-virus and anti-spyware stuff, and my little network here at the day job office is, I believe, pretty secure and protected. One thing I really don't like is that my mail server does not filter spam and virii PRIOR to delivery it to the individual clients. Each client does run an anti-virus program and I make darn sure they are all updated and the users know what to and not to do. We are a small shop and for now, we can't justify the cost of an Exchange server and I have no faith in my ability to keep a *nix box secure much less a sendmail MTA. Please don't turn this into a "...you can do it all with Lee-nucks thread." I simply don't have time, and I don't believe it based on prior attempts. Some of my clients have a simple, bare bones, but very solid (apparently) anti-virus program called f-prot: http://www.f-prot.com which currently has an entry for W32/Sober.Z@mm. I have personally verified that f-prot DOES protect us against that one. Two of my other machines (boss and his daughter) are protected by Norton Anti-virus. We pay top dollar for that and it does everything, anti-virus, adware, spyware, privacy protection, etc.... But here is the kicker: There is NO mention of Sober.Z on Symantecs website or in the list of virus signatures in the software even after live update. A. Somebody please prove me wrong? It just can NOT be that Symantec still doesn't have an entry for Sober.Z a full week after its detection. B. Is there a place were people talk about this sort of thing? A PICList for the Anti-virus crowd? Is Slashdot a good place to post this question? C. What can I do to make darn sure we don't get infected? Is there a good, stable, simple system for stopping virii (and hopefully also spam) BEFORE it gets to the MTA? I am aware that spampal can be run as a W32 service, but I also see a lot of people have had trouble with it and the developer does not inspire me with great confidence. I would be interested in a good, well reviewed and respected program SMTP filter program for NT, even if I have to pay for it. I wish f-prot had one. Their only solution other than their Exchange server support, seems to involve them acting as the MTA and forwarding the emails to us which is not acceptable. --- James Newton: PICList webmaster/Admin mailto:jamesnewton@piclist.com 1-619-652-0593 phone http://www.piclist.com/member/JMN-EFP-786 PIC/PICList FAQ: http://www.piclist.com -- http://www.piclist.com PIC/SX FAQ & list archive View/change your membership options at http://mailman.mit.edu/mailman/listinfo/piclist