On Wednesday 01 May 2002 05:21, Mate Wierdl wrote:
> So then removing attachments is just snakeoil: viruses are
> application/octet-stream.

Mail viruses are frequently of almost any MIME type ... it's usually the 
file extension that determines what certain brain-damaged MUAs pay 
attention to.

Unfortunately the solution I've been using is Exim (www.exim.org) 
specific ... a carefully crafted filter using regexps to check for 
certain file extensions in a message whilst ignoring all the MIME 
encapsulation stuff.

It seems to be pretty successful, although it isn't a 100% cure ... I've 
been using it for a couple of years and no outbreaks of mail viruses 
where I work.

The latest version of the filter is lurking in the Exim mailing list 
archive, and it might be possible to hack it to work with qmail. I can 
dig up a copy if anyone is interested in working on it.

Reply via email to