Andy Spiegl said: > Hi Chris, > >> Oh, hey. I suppose the clamstream script would be helpful as well? > Yep, thanks for remembering. :-) > > I've had virus-scanning incoming on my todo list for ages, > but reading your mail finally made me start with it. Thanks! > > The scripts sounds great, just two questions: > - why did you switch from "reformime -xpart-" to "base64dec"? > - and where do I find "base64dec"? >
Oh, sure, expect me to remember things like that (*rolls eyes*)... Actually IIRC, I was just too lazy to find a debian package for the prerequisite, so I just passed the stream through this perl script, which I apparently named base64dec: #!/usr/bin/perl -n use MIME::Base64; print decode_base64($_); Hooray for the THIRD part of my incomplete ClamAV/procmail suggestion! PS. I don't recall where I found the base clamstream script. PPS. It's probably better to use the original utility "reformime", but who knows... not me... -- Chris Thielen Easily generate SpamAssassin rules to catch obfuscated spam phrases (0BFU$C/\TED SPA/\/\ P|-|RA$ES): http://www.sandgnat.com/cmos/
