Hi,
I already implemented Lena's solutions and thinking to stop ClamAV. It's only
take resources ... by my opinion.
Best Regards.
From: Heiko Schlittermann <[email protected]>
To: [email protected]
Sent: Wednesday, April 13, 2016 10:15 AM
Subject: Re: [exim] Question about ClamAV
pencho kuncho <[email protected]> (Mi 13 Apr 2016 08:11:44 CEST):
> I use ClamAV on my mail server and i wondering if i block extension through
> Exim, is it useless? Thanks.
ClamAV (as most other malware scanner) wasn't able to detect some of the
tesla crypt variants. They went through as .js packed in .zip.
So - depending on your situtation - you may block some
extensions after unpacking the mime parts.
Search the archives for 'lena kiev' for possible solutions.
Best regards from Dresden/Germany
Viele Grüße aus Dresden
Heiko Schlittermann
--
SCHLITTERMANN.de ---------------------------- internet & unix support -
Heiko Schlittermann, Dipl.-Ing. (TU) - {fon,fax}: +49.351.802998{1,3} -
gnupg encrypted messages are welcome --------------- key ID: F69376CE -
! key id 7CBF764A and 972EAC9F are revoked since 2015-01 ------------ -
--
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/
--
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/
