Hi all 
over the past few weeks, SPAM has started penetrating PROXMOX and enter into our mail system. I'm not talking only "Buy VIAGRA" / "Enlarge your johnson" type of SPAM - I'm talking executables inside ZIPed folders.
for example, this Email with an attachment called utility.zip passed all checks and was stopped by SMSMSE on the Exchange server:
Subject: your mailbox has been deactivated
We are contacting you in regards to an unusual activity that was identified in your mailbox. As a result, your mailbox has been deactivated. To restore your mailbox, you are required to extract and run the attached mailbox utility.
Best regards, XXXXXXX.com technical support.
another example is the infamous "Facebook updated account agreement" Email.
Will a new version with up to date CLAMAV and SPAM assassin be available soon? is there anything I can do to enhance security in the meantime? CLAMAV databases are up to date, all SPAM checks are ON, and both Quarantine Dangerous Files / Viruses rules are at the top of rules list with default settings.
over the past few weeks, SPAM has started penetrating PROXMOX and enter into our mail system. I'm not talking only "Buy VIAGRA" / "Enlarge your johnson" type of SPAM - I'm talking executables inside ZIPed folders.
for example, this Email with an attachment called utility.zip passed all checks and was stopped by SMSMSE on the Exchange server:
Subject: your mailbox has been deactivated
We are contacting you in regards to an unusual activity that was identified in your mailbox. As a result, your mailbox has been deactivated. To restore your mailbox, you are required to extract and run the attached mailbox utility.
Best regards, XXXXXXX.com technical support.
another example is the infamous "Facebook updated account agreement" Email.
Will a new version with up to date CLAMAV and SPAM assassin be available soon? is there anything I can do to enhance security in the meantime? CLAMAV databases are up to date, all SPAM checks are ON, and both Quarantine Dangerous Files / Viruses rules are at the top of rules list with default settings.
