I don't understand your point.

I run a Mac. I don't care for _any_ .exes period.

therefore I'm loading the antivirus plugin in order to make use of
check_microsoft_executable rule. However that rule doesn't fire
if the attacker is disguising the .exe with a non sensical content type
primarily because the code currently assumes it wouldn't happen.

Q. Why do you keep talking about Spam Assassin not being an anti virus
tool... I never said it was I'm simply enabling the plugin to get the rule
to fire.

Quoting "John D. Hardin" <[EMAIL PROTECTED]>:

> On Mon, 14 Aug 2006, Robert Nicholson wrote:
> 
> > Any plans to change this? It's obviously an area where the spammer
> > has found a way to work around the rule.
> 
> SA is not an antivirus tool, and an attached executable is not spam,
> it is a security attack.
> 
> If you're not willing to run a traditional virus scanner, may I
> suggest this as an alternative for attachment policy enforcement:
> 
>   http://www.impsec.org/email-tools/procmail-security.html
> 
> --
>  John Hardin KA7OHZ    ICQ#15735746    http://www.impsec.org/~jhardin/
>  [EMAIL PROTECTED]    FALaholic #11174    pgpk -a [EMAIL PROTECTED]
>  key: 0xB8732E79 - 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
> -----------------------------------------------------------------------
>  Windows and its users got mentioned at home today, after my wife the
>  psych major brought up Seligman's theory of "learned helplessness."
>                                       -- Dan Birchall in a.s.r
> -----------------------------------------------------------------------
> 
> 




----------------------------------------------------------------
This message was sent using IMP, the Internet Messaging Program.

Reply via email to