<quote who="[EMAIL PROTECTED]">

> do you have checks that detect mydoom in ZIPs ? I've put the checks that
> were on the Postfix list, but, I'm still getting a lot of 30k zips
> through.

Are you using this one (body check)?

  /^UEsDBAoAAAAAA/   DISCARD W32.MyDoom.A

- Jeff

-- 
GVADEC 2004: Kristiansand, Norway                    http://2004.guadec.org/
 
       The implementation of any sufficiently advanced technology is
                        indistinguishable from pr0n.
-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html

Reply via email to