Are you blocking it with regexp so you don't have to pass it to Amavisd? Or
do you not run av on the gateway? 

Eric Long
SystemLink Broadband Corp.
10460 Roosevelt Blvd. Suite 277
St. Petersburg, FL  33716
www.systemlinkbroadband.com
Main 727.556.9033
Support 727.573.9020
 

-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On
Behalf Of Chris Scott
Sent: Wednesday, March 03, 2004 10:52 AM
To: [EMAIL PROTECTED]
Subject: [IMGate] Re: Email with password protected attachments are
defeating Virus Scanners

Webmaster Oilfield Directory wrote:

> ohhhhhh great i just got one of those files... how do i block them with
> regex etc... thanks !

I'm using:
/^UEsDBAoAAQAAA/ DISCARD

Not sure if this will block all password protected zips, or even if it 
blocks all Bagle variants.  I received two prior to implementing this and 
they both had that signature.  I have blocked one since implementing it and 
it was a virus.

-- 
Chris Scott
Host Orlando, Inc
http://www.hostorlando.com/



Reply via email to