How hard would it be to filter *.vbs attachments out. It was fairly simple to do with NT based MDaemon, but I'm not sure how to go about it with exim or postfix.
----- Original Message ----- From: "Russell Coker" <[EMAIL PROTECTED]> To: "Cherubini Enrico" <[EMAIL PROTECTED]>; "Ralf G. R. Bergs" <[EMAIL PROTECTED]> Cc: <[email protected]>; <[email protected]> Sent: Sunday, May 07, 2000 6:17 AM Subject: Re: Exim Subject rejection, (* **** ***) On Thu, 04 May 2000, Cherubini Enrico wrote: >> if ($h_subject: is "ILOVEYOU" or $h_subject: is "I LOVE YOU") and not >> error_mess > >what if someone change subject ? I can't understand why we should believe >the virus can be only in email with these subject (or like the penpal friend >one) >Wouldn't be better do scan email in body searching for fingerprint of macros >? maybe it can be of high weight to scan all email, but if you want to do >something, it's better to do it at the best. Another issue of course is that this subject filter will really suck when St Valentine's day comes around. -- My current location - X marks the spot. X X X -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
