Re: [Qmail-scanner-general]ms-dos and .com files

[Salvatore Toribio]

At 5:29 -0800 19-03-2004, Ed BK wrote:
I do have a line like this
.com 0 COM not allowed per Company security policy
all my other entrys get droped fine but this
this is the last type of file anybody wants coming in.
Yet this gets by MS-DOS Application eicar.com
test 4 and 5 do not get droped
http://www.testvirus.org
------------------------------
This works for me, I've just tested it:

20/03/2004 09:30:04:10740: p_s: Quarantine MyProfile.com! (COM not 
allowed per Company security policy)

Try to delete the line, then retype it and rebuild the database

	/var/qmail/bin/qmail-scanner-queue.pl -g

Regards

ST

--- Salvatore Toribio <[EMAIL PROTECTED]> wrote:
 At 4:00 -0800 19-03-2004, Ed BK wrote:
 >Hi List
 >
 >I thought the qmail-scanner by default was set to
 >block
 >all ms-dos apps with a .com file
 >BinHex encoding
 >
 >I see a entry for the .com file
 >
 >Saying that, if not by default
 >can somone explain or show what I need to enter
 >in qmail-scanner-queue.pl or
 >quarantine-attachments.txt to drop all these nasty
 >ms-dos and .com files?
 >
 >I test at testvirus.org
 I don't think there is a line like that in the
 orginal file, you can
 do something like this:
 #
 # These are examples of prudent defaults to set for
 most sites.
 # Commented out by default (you may uncomment then)
 .vbs    0       VBS files not allowed per Company
 security policy
 .lnk    0       LNK files not allowed per Company
 security policy
 .scr    0       SCR files not allowed per Company
 security policy
 .wsh    0       WSH files not allowed per Company
 security policy
 .hta    0       HTA files not allowed per Company
 security policy
 .pif    0       PIF files not allowed per Company
 security policy
 #
 # st: also these may be blocked
 .bat    0       COMMAND.COM batch file not allowed
 per Company security policy
 .com    0       COM not allowed per Company security
 policy
 # ******
 # REMEMBER: run
 > /var/qmail/bin/qmail-scanner-queue.pl -g after
 # this file is modified
 # ******
 > Salvatore


-------------------------------------------------------
This SF.Net email is sponsored by: IBM Linux Tutorials
Free Linux tutorial presented by Daniel Robbins, President and CEO of
GenToo technologies. Learn everything from fundamentals to system
administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click
_______________________________________________
Qmail-scanner-general mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general