[Esd-l] URG: Updated novarg local rule for sanitizer
Jason Noble
sysadmin at polezero.com
Tue Jan 27 10:09:56 PST 2004
Why reinvent the wheel?
Amavis works great for me, it caught this new virus right away.
I use the sanitizer to catch the loose ends.
On Tue, 2004-01-27 at 11:48, Scott Taylor wrote:
> At 06:08 AM 01/27/2004, John D. Hardin wrote:
> >All:
> >
> >Based on what made it through overnight I have updated the rule a bit.
> >See the attachment or grab the recommended rules file.
>
> Cheers.
>
> >Unfortunately it seems to be using some random filenames, so I will be
> >looking for signature strings in the base64 attachment body. Keying
> >off the filename won't be enough.
>
> Gee John, maybe it's time to write a full fledged virus scanner. How about
> uzipping the attachment and looking at it that way. May be a bit resource
> intensive, but that's why servers keep getting bigger. ;)
>
> >-----------------------------------------------------------------------
> > 67 days until the Slovakian Presidential Election
>
> HEHE
>
>
> _______________________________________________
> Esd-l mailing list
> Esd-l at spconnect.com
> http://www.spconnect.com/mailman/listinfo/esd-l
More information about the esd-l
mailing list