Hi,

We use MailSweeper from Content Technologies www.mimesweeper.com this has
lexical scanning capabilities and we were able to stop the love virus by
scanning for certain nasties in the script. Usefull if like us you have
legitimate VB stuff coming in every so often.

Good product works with most Virus software as well.

Cheers

Andy

-----Original Message-----
From: jkee(contr-ird) [mailto:[EMAIL PROTECTED]]
Sent: Friday, May 19, 2000 3:47 PM
To: 'THELLIER, Francis (Kedros)'; 'Perbix Michael'
Cc: '[EMAIL PROTECTED]'
Subject: RE: [FW1] Stripping VBS attachments



Suggestion:

Use the TrendMicro product called Interscan VirusWall.  It integrates with
Firewall-1.  It can be used for content filtering -- specifically, filter
for attachments that end in .vbs.

Product information at http://www.antivirus.com .  There are probably other
anti-virus or content filtering products that work in a similar way.  I am
only familiar with this one (and we're happy with it.)  

jk

-----Original Message-----
From: THELLIER, Francis (Kedros) [mailto:[EMAIL PROTECTED]]
Sent: Friday, May 19, 2000 9:01 AM
To: 'Perbix Michael'
Cc: '[EMAIL PROTECTED]'
Subject: RE: [FW1] Stripping VBS attachments



Hello,

this is one of my former message about stripping in Firewall-1 :
http://msgs.securepoint.com/cgi-bin/get/fw1-0001/17.html
look for it please,
But I never found how to strip .vbs files, maybe the respons is in the url
above,
but I can't find,
does anyone have an idea ?
Thanks in advance,

> Francis THELLIER
> -----Message d'origine-----
> De:   Perbix Michael [SMTP:[EMAIL PROTECTED]]
> Date: vendredi 19 mai 2000 14:38
> �:    '[EMAIL PROTECTED]'
> Objet:        [FW1] Stripping VBS attachments
> 
> 
> I have looked at the FAQ, the archives and some saved mail from the past
> month, but I can not find any reference to blocking VBS attachments at the
> firewall with SMTP security server.  I already have a SMTP resource in
> place
> for the ILOVEYOU virus, can I also add a MIME strip to that resource for
> the
> latest virus "fwd: <anyfilename>"?
> 
> I want to strip out ALL vbs attachments.  Also if this happens, can I put
> something in the message to indicate it happened?
> 
> Thanks again for the help..
> 
>     -Mike
> 
> ----------------------------------
> Michael Perbix
> Technology Network Hardware Technician
> Lower Merion School District
> Phone: (610) 896-8267
> Fax: (610) 896-8224
> 
> 
> ==========================================================================
> ======
>      To unsubscribe from this mailing list, please see the instructions at
>                http://www.checkpoint.com/services/mailing.html
> ==========================================================================
> ======


============================================================================
====
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
============================================================================
====


============================================================================
====
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
============================================================================
====
**********************************************************************
This email and any files transmitted with it are confidential and 
intended solely for the use of the individual or entity to whom they   
are addressed. If you have received this email in error please notify 
the sender immediately.

This footnote also confirms that this email message has been swept for
the presence of computer viruses.
**********************************************************************


================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================

Reply via email to