[Esd-l] Poison Files

John D. Hardin jhardin at impsec.org
Thu Jan 16 18:03:01 PST 2003


On Thu, 16 Jan 2003, Scott Taylor wrote:

> It does trap and quarantine .exe files and others, but not extra
> file specified in the poisoned file, they are just passed through
> but do include the X-Security header line.

What precisely do you mean by "extra file"?

The poisoned-file list is what causes things to be quarantined (well,
that plus local-rules plus magic scanning).

If you set DEBUG_VERBOSE to anything, it will list the poisoned
filespecs as it checks them.

--
 John Hardin KA7OHZ    ICQ#15735746    http://www.impsec.org/~jhardin/
 jhardin at impsec.org                        pgpk -a jhardin at impsec.org
 key: 0xB8732E79 - 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
  The fetters imposed on liberty at home have ever been forged out
  of the weapons provided for defense against real, pretended, or
  imaginary dangers from abroad.
                                            -- James Madison, 1799
-----------------------------------------------------------------------
   656 days until the Presidential Election



More information about the esd-l mailing list