[Esd-l] URG: Updated novarg local rule for sanitizer

Jason Noble sysadmin at polezero.com
Tue Jan 27 10:09:56 PST 2004


Why reinvent the wheel?
Amavis works great for me, it caught this new virus right away.
I use the sanitizer to catch the loose ends.

On Tue, 2004-01-27 at 11:48, Scott Taylor wrote:
> At 06:08 AM 01/27/2004, John D. Hardin wrote:
> >All:
> >
> >Based on what made it through overnight I have updated the rule a bit.
> >See the attachment or grab the recommended rules file.
> 
> Cheers.
> 
> >Unfortunately it seems to be using some random filenames, so I will be
> >looking for signature strings in the base64 attachment body. Keying
> >off the filename won't be enough.
> 
> Gee John, maybe it's time to write a full fledged virus scanner.  How about 
> uzipping the attachment and looking at it that way.  May be a bit resource 
> intensive, but that's why servers keep getting bigger. ;)
> 
> >-----------------------------------------------------------------------
> >    67 days until the Slovakian Presidential Election
> 
> HEHE
> 
> 
> _______________________________________________
> Esd-l mailing list
> Esd-l at spconnect.com
> http://www.spconnect.com/mailman/listinfo/esd-l



More information about the esd-l mailing list