You could try using MailScanner (http://www.mailscanner.info). If you are running linux on the mail server you could use Clam or Bit Defender or any number of commercial Avs.
Michele Mr Michele Neylon Blacknight Internet Solutions Ltd http://www.blacknight.ie/ Tel. +353 59 9137101 ________________________________ From: Bryan Haase [mailto:[EMAIL PROTECTED] Sent: 19 May 2004 16:57 To: [EMAIL PROTECTED] Subject: Re: Can anyone block this email?? I need to clarify my security department is running Interscan VirusWall but it didn't detect the virus and let the email pass. I assume that with the updated patterns that future messages would be blocked. That still leaves a problem that this type of message, can score nothing by SpamAssassin. I am sure that [EMAIL PROTECTED] didn't send the messages....why didn't that trip any rules? -Bryan >>> Ron Johnson <[EMAIL PROTECTED]> 05/19/04 10:27AM >>> Matt Kettler writes: > > At 10:23 AM 5/19/2004, Bryan Haase wrote: > >I have an email that didn't hit on anything. It had one sentence "Please > >read the attached file (Dkaufman.zip)." And of course a zip virus > >attached. The from is > ><mailto:[EMAIL PROTECTED]>[EMAIL PROTECTED] with a message ID > >from Hotmail... I would assume that something should have hit. I have > >aggressively high scoring/rules so I have -5 to allow personal email to > >come thru. > > > >Does anyone have a way to block this email? (Header below) > >Is there a way to score zip attachments or score attachment by file size > >ie <50K? > > How about using a virus scanner to block it? clamav is free, and you can > implement it on the MTA level. You could also use mimedefang. Add it to the list of evil attachment types if you want to block all zips. -- Ron -- Email scanned for viruses and dangerous content by Blacknight <http://www.blacknight.ie/>
