I do have a line like this .com 0 COM not allowed per Company security policy all my other entrys get droped fine but this this is the last type of file anybody wants coming in.
Yet this gets by MS-DOS Application eicar.com test 4 and 5 do not get droped http://www.testvirus.org ------------------------------ --- Salvatore Toribio <[EMAIL PROTECTED]> wrote: > At 4:00 -0800 19-03-2004, Ed BK wrote: > >Hi List > > > >I thought the qmail-scanner by default was set to > >block > >all ms-dos apps with a .com file > >BinHex encoding > > > >I see a entry for the .com file > > > >Saying that, if not by default > >can somone explain or show what I need to enter > >in qmail-scanner-queue.pl or > >quarantine-attachments.txt to drop all these nasty > >ms-dos and .com files? > > > >I test at testvirus.org > > I don't think there is a line like that in the > orginal file, you can > do something like this: > > # > # These are examples of prudent defaults to set for > most sites. > # Commented out by default (you may uncomment then) > .vbs 0 VBS files not allowed per Company > security policy > .lnk 0 LNK files not allowed per Company > security policy > .scr 0 SCR files not allowed per Company > security policy > .wsh 0 WSH files not allowed per Company > security policy > .hta 0 HTA files not allowed per Company > security policy > .pif 0 PIF files not allowed per Company > security policy > # > # st: also these may be blocked > .bat 0 COMMAND.COM batch file not allowed > per Company security policy > .com 0 COM not allowed per Company security > policy > > # ****** > # REMEMBER: run > /var/qmail/bin/qmail-scanner-queue.pl -g after > # this file is modified > # ****** > > Salvatore > > > ------------------------------------------------------- > This SF.Net email is sponsored by: IBM Linux > Tutorials > Free Linux tutorial presented by Daniel Robbins, > President and CEO of > GenToo technologies. Learn everything from > fundamentals to system > administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click > _______________________________________________ > Qmail-scanner-general mailing list > [EMAIL PROTECTED] > https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general ===== Thanks as always! Ed BK ------------------- My OS info is rh9 (Plesk cp 6.0 rpm version) (qmail) with SA 2.63 and Qmail-scanner 120 ALL settings are SERVER WIDE ONLY __________________________________ Do you Yahoo!? Yahoo! Mail - More reliable, more storage, less spam http://mail.yahoo.com ------------------------------------------------------- This SF.Net email is sponsored by: IBM Linux Tutorials Free Linux tutorial presented by Daniel Robbins, President and CEO of GenToo technologies. Learn everything from fundamentals to system administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click _______________________________________________ Qmail-scanner-general mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general
