Steve: I'm not sure it's quite that simple... But I agree with the sentiment.

I went ahead and installed a pre-mail server, (forwarder), and implemented the free version of MailSecurity so that my mail will be prescanned by a virus checker from a different company, (I chose BitDefender), that is updated hourly. The mail is then forwarded to the normal mailservers that are scanned by Norton updated every 4 hours. In addition the MailSecurity blocks the common content that carried such little "beauties" quite nicely. With luck the virii will stay out since collecting personal email from web based, or any other "based", locations is a) prohibited by policy that could result in termination, (read: "will" if I have my say), and b) blocked by Surfcontrol and the firewall as best I can. My IDS system alerts me when attempts are made to visit such places and they get an Messanger message telling them to cut it out or I will inform administration and their supervisor and that I will pay them a visit that they won't like.....

My firewall is set to only allow in the necessary and only to the required servers which are set to auto-update themselves daily regardless of the fact that it might down the server, I'd rather have no service than one with a hole in it. Each public server has mirrored boot drives and I make and break the mirror periodically so that if the server dumps we reboot from the unpatched mirror if absolutely necessary.

Am I saying that I am "bulletproof"? Nope.... but I do get a warm fuzzy feeling when we go untouched as we have the last two weeks while there are horror stories all over about the damage that is being done......