|
I need to clarify my security department is running Interscan
VirusWall but it didn't detect the virus and let the email pass. I
assume that with the updated patterns that future messages would be blocked.
That still leaves a problem that this type of message, can score nothing by
SpamAssassin. I am sure that [EMAIL PROTECTED] didn't send
the messages....why didn't that trip any rules?
-Bryan
>>> Ron Johnson <[EMAIL PROTECTED]> 05/19/04 10:27AM >>> Matt Kettler writes: > > At 10:23 AM 5/19/2004, Bryan Haase wrote: > >I have an email that didn't hit on anything. It had one sentence "Please > >read the attached file (Dkaufman.zip)." And of course a zip virus > >attached. The from is > ><mailto:[EMAIL PROTECTED]>[EMAIL PROTECTED] with a message ID > >from Hotmail... I would assume that something should have hit. I have > >aggressively high scoring/rules so I have -5 to allow personal email to > >come thru. > > > >Does anyone have a way to block this email? (Header below) > >Is there a way to score zip attachments or score attachment by file size > >ie <50K? > > How about using a virus scanner to block it? clamav is free, and you can > implement it on the MTA level. You could also use mimedefang. Add it to the list of evil attachment types if you want to block all zips. -- Ron |
------------------------------------------------- This email transmission and any documents, files or previous
email messages attached to it may contain information that is confidential or legally privileged. If you are not the intended recipient, you are hereby notified that any disclosure, copying, printing, distributing or use of this transmission is strictly prohibited. If you have received this transmission in error, please immediately notify the sender by telephone or return email and delete the original transmission and its attachments without reading or saving in any manner. The Evangelical Lutheran Good Samaritan Society. ---------------------------------------------------------
