Should I Scan Server ?

[Ramster]

Howdy and Hello,

I used to host with site 5 and there in CPanle was included CLAM anti virus scanner which used to find a lot of stuff in the e mails. Now that i have migrated to hostnine i was wondering if it is necessary to scan the server or not?

I do have a client which is under attack a lot and i want to make sure he is protected and his staff which are around 50 e mail accounts.

I found that the server was used to spam by outsiders somehow at site5 also and i used to battle the spam e mail if anyone could guise me into the right direction of how to combat spam and Trojans in mails i would be very happy indeed.

Thanks

[kobra]

Not for SPAM but for Trojans in emails:

Good Pratice: NEVER open an email that you are not positive of the source and run and maintain a virus program on every station

[Ramster]

After downloading a backup of a site and scanning it on my home PC it showed up with a lot of trojans (Trojan-Downloader.HTML.Agent.km) in the mail system in e mails from trusted sources (banks)...

What does it mean when e mails from trusted sources have trojans in them like a bank?

What should i use to scan the mail server?

How can i make sure the mail server is safe and has not been infiltrated by someone?

How can i make a mail server on hostnine safe any plugins or clients to install?

Please advice as i am sure on at least one site we are under attack and i need to make sure all the e mails are safe.

Any tips and help is most welcome, thanks

[kobra]

it showed up with a lot of trojans (Trojan-Downloader.HTML.Agent.km) in the mail system in e mails from trusted sources (banks)...

You only believe these are "trusted" because they portray themselves as Banks.

Are these from your bank?
Are there links in the email?
Hover over the link and determine what url the link would take you to and I believe you will find that it is not the bank being represented.
Like this one stating it is from SVB Bank but you can see that the actual domain is "76789shared.com" and NOT "www.svb.global" as they want you to believe.

http://www.svb.global.portal.id-c9i0ndod.logon.76789shared.com/clientnews.htm?/launchpad/version=b5szx22aq

What should i use to scan the mail server?

You do not have the authority to scan the mail server...
You can use SPAM filters available in your cPanel to pre-screen mail

How can i make a mail server on hostnine safe

A mailserver is only a transport agent and you can not impose your own rules upon the mailserver that is shared by all...
All that you can do is provide your own due diligence as to what and where these mails are coming from.

[Ramster]

Thank you Kobra,

That was very helpful for me to understand how the mail server works and my limitations of changing the system.

I will concentrate on educating staff to make sure they scan e mails and also not to give out e mail address to unknown parties.

Great advice i am somehow a little paranoid and tend to panic, but i think paranoia is good fear is not! I need to continue to educate myself so i know all the ins and outs as on the site5 hosting we were attacked by nasty people with spam and also on the backstage management areas and DDOS attacks. The server settings there were more open and SSH was freely available also which made it more of a target i think.

Thanks again ...