On Tue, Sep 30, 2003 at 03:53:12PM -0500, [EMAIL PROTECTED] wrote: > Today I noticed we're getting false sender notifications from a > Worm.LoveLorn.VBS and was wondering what else I need to put in there? Does > someone maintain an updated list?
You just need to make statements like that on the list :-) What we really need is for AV vendors to start associating such "meta" information with their virus files. e.g. that a particular virus/trojan generates it's own message (and as such can be deleted/blocked instead of "cleaned"), or if it just infects a file (such as a VB script virus). That way such applications as SMTP gateways could make better choices as to how to handle a message. At the moment, no such standards exist, so it has to be application-specific - such as Q-S's SILENT_VIRUSES feature... > Also is there a way to vi /var/qmail/bin/qmail-scanner-queue.pl without the > permissions resetting? Right after doing a vi on the file and saving it, it > looses its "s" bit. Of course until I can type "chmod 4755 > /var/qmail/bin/qmail-scanner-queue.pl" email is been rejected. This is a > Red Hat Linux box. There was a release of vi for RH that did that. Try upgrading/change editors? -- Cheers Jason Haar Information Security Manager, Trimble Navigation Ltd. Phone: +64 3 9635 377 Fax: +64 3 9635 417 PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB FE1D 66D1 ------------------------------------------------------- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf _______________________________________________ Qmail-scanner-general mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general
