On Tue, July 13, 2004 16:20, Mark Powell said: > On Tue, 13 Jul 2004, Robin Bowes wrote: >> I'm just getting started with qpsmtpd having run stock qmail for some years. >> > > Welcome, wanderer :)
;o) I roam around, around, etc. etc. >> I wonder, has anyone written a plugin that replicates Russ Nelson's >> qmail-smtpd-viruscan functionality >> (http://qmail.plig.org/qmail-smtpd-viruscan-1.3.patch) ? i.e. something >> that "looks at the first line of MIME attachments to see if they're found in >> control/signatures. This catches nearly all current Microsoft viruses." >> >> I am aware that there are a variety of techniques to scan for viruses >> but this one seems to be both simple and effective. > > This was discussed recently and you should be aware that scripts are not > blocked by this technique e.g. .vbs, etc. If you want full/real attachment blocking > then > you'll have to go with something like qmail-scanner. I may well implement some "proper" form of virus scanning at some stage. > The technique you're after, although very lightweight, is unfortunately not a > complete solution, therefore it's not a solution :( Aha, the binary approach to systems engineering. :) I need to analyse the problem in more detail, but a cursory glance shows that I don't really get many virii, just mainly spam, and the vast majority of the virii I do get are .exe/.com/.scr. So, my initial analysis suggests I have a lightweight problem, and therefore a lightweight solution may be appropriate. Also, I don't have as many students to look after as you do! R. -- http://robinbowes.com
