[Esd-l] Poison Files

John D. Hardin jhardin at impsec.org
Fri Jan 17 21:52:01 PST 2003


On Fri, 17 Jan 2003, Scott Taylor wrote:

> I did that, looked at procmail.log but I don't know what I should
> be looking for.  There is no list of poisoned filespecs that I can
> see.  What should I be looking for?

Something like:

Checking "10th July 2002   claire.doc.scr" for poisoning.
  Checking against ".*\.asd(\?=)?$"
  Checking against ".*\.bat(\?=)?$"
  Checking against ".*\.chm(\?=)?$"
  Checking against ".*\.com(\?=)?$"
  Checking against ".*\.cil(\?=)?$"
  Checking against ".*\.dll(\?=)?$"
  Checking against ".*\.hlp(\?=)?$"
  Checking against ".*\.hta(\?=)?$"



--
 John Hardin KA7OHZ    ICQ#15735746    http://www.impsec.org/~jhardin/
 jhardin at impsec.org                        pgpk -a jhardin at impsec.org
 key: 0xB8732E79 - 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
  The fetters imposed on liberty at home have ever been forged out
  of the weapons provided for defense against real, pretended, or
  imaginary dangers from abroad.
                                            -- James Madison, 1799
-----------------------------------------------------------------------
   655 days until the Presidential Election



More information about the esd-l mailing list