I don't normally create my own sig's but this morning we are getting a
lot of these. ClamAV is not detecting anything. Below is a sig , below
is one of the messages. My concern before I put this into production is
that my sig attempt may be to broad and catch things that shouldn't.
I don't normally create my own sig's but this morning we are getting a
lot of these. ClamAV is not detecting anything. Below is a sig , below
is one of the messages. My concern before I put this into production is
that my sig attempt may be to broad and catch things that shouldn't.
On Fri, 16 Dec 2005 at 10:09:45 -0700, [EMAIL PROTECTED] wrote:
I don't normally create my own sig's but this morning we are getting a
lot of these. ClamAV is not detecting anything.
[...]
We got your submission.
There is nothing but a harmless GIF file in the sample. Nothing for
ClamAV to
Original Message
Subject: Re: [Clamav-users] new sig please test
From: Dennis Peterson [EMAIL PROTECTED]
Date: Fri, December 16, 2005 10:39 am
To: clamav-users@lists.clamav.net
I don't normally create my own sig's but this morning we are getting a
lot
R0lGODdhuAGkAYAAAP///wAAACwAuAGkAQAC/owRiGetqYBcTiZ2j3X6wZ9dHgdZlOlFZbdM
psi4DXlWbgvW2oyH8b+ZiB6bDCpUlM2WQeEnGRNCe6TfE2Z13lrNSulFC4OYYOaXDE7KUDVixD3k
It seems to me it would be less machine effort to look for this pattern in
a message and reject or tempfail it:
