On Wed, 7 Mar 2001 14:55:07 +0100
"Stanislaw Winiecki" <[EMAIL PROTECTED]> wrote:
| 2) Did anybody try to make a simple anti-worm mail processing system for
| e-smith?
| What I mean is a following set of actions:
| - Look at every mail received
| - Check the attachments against a list of specified attachment names (a
| text
| file, specifying unwanted attachments, one by one)
| - If a match is found - strip the attachment and leave info regarding this
| action in the message body
that would be impossible without recreating the message and all the headers
along with it.
One thing you could do is scan for only messages over 5KB for example but even
then small vbscripts could sneak in.
| - Deliver
| Such a simple system, although trivial, might be quite useful, especially
| when there appears a new worm (like NakedWife.exe yesterday) in the wild
A quick and effective way that we use on our email software is simply put a
server wide rule
IF SUBJECT IS *Fw: Naked Wife*
THEN STORE IN ~postmaster/virus
DISCARD
For us to implement McAfee virus scanning it it's $1,600 which I doubt we'll get
approved anytime soon.
