[Esd-l] Poison Files

John D. Hardin jhardin at impsec.org
Thu Jan 16 18:03:01 PST 2003

On Thu, 16 Jan 2003, Scott Taylor wrote:

> It does trap and quarantine .exe files and others, but not extra
> file specified in the poisoned file, they are just passed through
> but do include the X-Security header line.

What precisely do you mean by "extra file"?

The poisoned-file list is what causes things to be quarantined (well,
that plus local-rules plus magic scanning).

If you set DEBUG_VERBOSE to anything, it will list the poisoned
filespecs as it checks them.

 John Hardin KA7OHZ    ICQ#15735746    http://www.impsec.org/~jhardin/
 jhardin at impsec.org                        pgpk -a jhardin at impsec.org
 key: 0xB8732E79 - 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
  The fetters imposed on liberty at home have ever been forged out
  of the weapons provided for defense against real, pretended, or
  imaginary dangers from abroad.
                                            -- James Madison, 1799
   656 days until the Presidential Election

More information about the esd-l mailing list