On Sun, 20 Jan 2008 07:25:32 -0500, Gerard wrote
> On Sun, 20 Jan 2008 11:47:57 +0000 (GMT)
> "G.W. Haywood" <[EMAIL PROTECTED]> wrote:
> 
> [snip]
> 
> > My personal policy is to delete all files which have names ending in
> > ".exe", and I suggest that everyone should consider that approach.
> 
> Why? On a none Win32 machine, the chance of such a file causing
> problems is nil and on a Win32 machine using such a 'scorched earth'
> policy would prove catastrophic. It would seem far wiser to simply
> refuse such files from users you are not acquainted with and properly
> screen such files from users who are familiar to you.
> 
> Just my 2ยข.
> 
> -- 
> Gerard
> [EMAIL PROTECTED]
> 
> I am just a nice, clean-cut Mongolian boy.
> 
>       Yul Brynner, 1956


I prefer a scorched earth to a scorched ass! Especially with a server that is 
trying to
protect Winoze users from their own stupidity. There are far too many users who 
will
gladly click on anything if you tell them to.
The default mimedefang filter flags almost all known executable suffixes as 
suspicious.
If someone must send an executable file, then ask them to obfuscate the suffix 
according
to a known plan. e.g. using fyf instead of exe
And don't think you can simply zip the file, because mimedefang unzips before 
checking
the file suffix.

Just my AUD 2c + GST

--
Bill Maidment
Maidment Enterprises Pty Ltd
www.maidment.vu
Off-site consultant to Elgas Ltd

_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://lurker.clamav.net/list/clamav-users.html

Reply via email to