Re: Simple e-mail virus scanner

On Wed 20 Aug Olaf Dietsche wrote: > I guess, you could integrate this in . > SpamAssassin already scans the email body for signs of spam, so it > shouldn't be too hard, to add another regex. Although, I never did > this myself. I just use SpamAssassin out of the box wi

Re: Simple e-mail virus scanner

On Wed 20 Aug Olaf Dietsche wrote: > I guess, you could integrate this in . > SpamAssassin already scans the email body for signs of spam, so it > shouldn't be too hard, to add another regex. Although, I never did > this myself. I just use SpamAssassin out of the box wi

Re: Simple e-mail virus scanner

## Guido Hennecke ([EMAIL PROTECTED]): > > > With exim and RBLs it is possible, to not accept mails. Is there a way > > > to use these filters with exim but not to send a bounce message? > > Use "seen finish" as action istead of "fail ...". > In ftp://ftp.exim.org/pub/filter/system_filter.exim "se

Re: Simple e-mail virus scanner

## Guido Hennecke ([EMAIL PROTECTED]): > > > With exim and RBLs it is possible, to not accept mails. Is there a way > > > to use these filters with exim but not to send a bounce message? > > Use "seen finish" as action istead of "fail ...". > In ftp://ftp.exim.org/pub/filter/system_filter.exim "se

Re: Simple e-mail virus scanner

Am Thu, Aug 21, 2003 at 04:23:45PM -0400, Michael Stone sagte: > On Thu, Aug 21, 2003 at 09:59:09PM +0200, Christoph Moench-Tegeder wrote: > >The optimum is rejecting unsolicited mails during the SMTP dialog, this > >way there will be no bounces to innocent bystanders (as caused by the > >latest ep

Re: Simple e-mail virus scanner

Am Thu, Aug 21, 2003 at 04:23:45PM -0400, Michael Stone sagte: > On Thu, Aug 21, 2003 at 09:59:09PM +0200, Christoph Moench-Tegeder wrote: > >The optimum is rejecting unsolicited mails during the SMTP dialog, this > >way there will be no bounces to innocent bystanders (as caused by the > >latest ep

Re: Simple e-mail virus scanner

On Thu, Aug 21, 2003 at 09:59:09PM +0200, Christoph Moench-Tegeder wrote: The optimum is rejecting unsolicited mails during the SMTP dialog, this way there will be no bounces to innocent bystanders (as caused by the latest epidemic disease). Not really. If the message goes through intermediate

Re: Simple e-mail virus scanner

## Guido Hennecke ([EMAIL PROTECTED]): > > Last modification about two years ago... > > > As usual never ever take automated action based on a simple thing > > > like filename or whatever. Sort them to a special mailbox and let a > > > human look at it. > > Strongly agreed. > It is much better to

Re: Simple e-mail virus scanner

On Thu, Aug 21, 2003 at 09:59:09PM +0200, Christoph Moench-Tegeder wrote: The optimum is rejecting unsolicited mails during the SMTP dialog, this way there will be no bounces to innocent bystanders (as caused by the latest epidemic disease). Not really. If the message goes through intermediate mx h

Re: Simple e-mail virus scanner

## Guido Hennecke ([EMAIL PROTECTED]): > > Last modification about two years ago... > > > As usual never ever take automated action based on a simple thing > > > like filename or whatever. Sort them to a special mailbox and let a > > > human look at it. > > Strongly agreed. > It is much better to

Re: Simple e-mail virus scanner

## Pascal Weller ([EMAIL PROTECTED]): > Isn't he saying that if i do the following: > "hey I get a lot of these document_all.pif recently" > this message here get filtered? It's not that easy. You need at leas Content-Type=something and a matching filename, given in MIME-style (name=...). The now

Re: Simple e-mail virus scanner

## Pascal Weller ([EMAIL PROTECTED]): > Isn't he saying that if i do the following: > "hey I get a lot of these document_all.pif recently" > this message here get filtered? It's not that easy. You need at leas Content-Type=something and a matching filename, given in MIME-style (name=...). The now

Re: Simple e-mail virus scanner

Kjetil Kjernsmo wrote: Dear all, I guess I'm not really looking for a "security solution", but I guess you folks are the most likely to know, so I try here... In the last couple of hours, I've got about 25 100KB of the recent Sobig.f M$ virus, along with about the same number of bogus "there

Re: Simple e-mail virus scanner

Kjetil Kjernsmo wrote: Dear all, I guess I'm not really looking for a "security solution", but I guess you folks are the most likely to know, so I try here... In the last couple of hours, I've got about 25 100KB of the recent Sobig.f M$ virus, along with about the same number of bogus "the

Re: Simple e-mail virus scanner

On Wednesday 20 August 2003 17:05, Jay Kline wrote: > > The mail server that send the bounce. This is called a double > > bounce. Correct me if this is wrong ... > > Yes, it goes back to the server doing the sending. Its a double > bounce when the bounce message itself bounces. I dont know how thi

Re: Simple e-mail virus scanner

On Wednesday 20 August 2003 17:05, Jay Kline wrote: > > The mail server that send the bounce. This is called a double > > bounce. Correct me if this is wrong ... > > Yes, it goes back to the server doing the sending. Its a double > bounce when the bounce message itself bounces. I dont know how thi

Re: Simple e-mail virus scanner

Am Wed, Aug 20, 2003 at 10:40:13AM -0400, Noah L. Meyerhans sagte: > On Wed, Aug 20, 2003 at 08:44:08AM +0200, Christoph Moench-Tegeder wrote: > > > > So, I'm wondering, does anybody know about any such approach? > > > After getting sick of all the virus crap in my inbox I installed the > > > follo

Re: Simple e-mail virus scanner

Am Wed, Aug 20, 2003 at 10:40:13AM -0400, Noah L. Meyerhans sagte: > On Wed, Aug 20, 2003 at 08:44:08AM +0200, Christoph Moench-Tegeder wrote: > > > > So, I'm wondering, does anybody know about any such approach? > > > After getting sick of all the virus crap in my inbox I installed the > > > follo

Re: Simple e-mail virus scanner

## Noah L. Meyerhans ([EMAIL PROTECTED]): > On Wed, Aug 20, 2003 at 08:44:08AM +0200, Christoph Moench-Tegeder wrote: > > > > So, I'm wondering, does anybody know about any such approach? > > > After getting sick of all the virus crap in my inbox I installed the > > > following in /etc/exim/system

Re: Simple e-mail virus scanner

## Noah L. Meyerhans ([EMAIL PROTECTED]): > On Wed, Aug 20, 2003 at 08:44:08AM +0200, Christoph Moench-Tegeder wrote: > > > > So, I'm wondering, does anybody know about any such approach? > > > After getting sick of all the virus crap in my inbox I installed the > > > following in /etc/exim/system

Re: Simple e-mail virus scanner

On Wednesday 20 August 2003 06:52 am, Yannick Van Osselaer wrote: > On Wednesday 20 August 2003 10:52, Kjetil Kjernsmo wrote: > > On Tuesday 19 August 2003 23:42, Noah L. Meyerhans wrote: > > This filter will reject at SMTP-time, right? One question there? Who > > gets the bounce? I'm getting a who

Re: Simple e-mail virus scanner

On Wednesday 20 August 2003 06:52 am, Yannick Van Osselaer wrote: > On Wednesday 20 August 2003 10:52, Kjetil Kjernsmo wrote: > > On Tuesday 19 August 2003 23:42, Noah L. Meyerhans wrote: > > This filter will reject at SMTP-time, right? One question there? Who > > gets the bounce? I'm getting a who

Re: Simple e-mail virus scanner

On Wed, Aug 20, 2003 at 08:44:08AM +0200, Christoph Moench-Tegeder wrote: > > > So, I'm wondering, does anybody know about any such approach? > > After getting sick of all the virus crap in my inbox I installed the > > following in /etc/exim/system_filter.txt: > > This approach yields a high false

Re: Simple e-mail virus scanner

On Wed, Aug 20, 2003 at 08:44:08AM +0200, Christoph Moench-Tegeder wrote: > > > So, I'm wondering, does anybody know about any such approach? > > After getting sick of all the virus crap in my inbox I installed the > > following in /etc/exim/system_filter.txt: > > This approach yields a high false

Re: Simple e-mail virus scanner

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Wednesday 20 August 2003 10:52, Kjetil Kjernsmo wrote: > On Tuesday 19 August 2003 23:42, Noah L. Meyerhans wrote: > > After getting sick of all the virus crap in my inbox I installed the > > Thanks, that looks interesting! I'm using the Debian Stab

Re: Simple e-mail virus scanner

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Wednesday 20 August 2003 10:52, Kjetil Kjernsmo wrote: > On Tuesday 19 August 2003 23:42, Noah L. Meyerhans wrote: > > After getting sick of all the virus crap in my inbox I installed the > > Thanks, that looks interesting! I'm using the Debian Stab

Re: Simple e-mail virus scanner

On Tuesday 19 August 2003 23:42, Noah L. Meyerhans wrote: > After getting sick of all the virus crap in my inbox I installed the Thanks, that looks interesting! I'm using the Debian Stable Exim packages too, so I guess this is something I can just cut'n'paste in! :-) And it seems I really need

Re: Simple e-mail virus scanner

Hi, Игорь Ляпин <[EMAIL PROTECTED]> writes: > Does the same approach could be use with sendmail ? Any examples? I guess, you could integrate this in . SpamAssassin already scans the email body for signs of spam, so it shouldn't be too hard, to add another regex. Alth

Re: Simple e-mail virus scanner

On Tuesday 19 August 2003 23:42, Noah L. Meyerhans wrote: > After getting sick of all the virus crap in my inbox I installed the Thanks, that looks interesting! I'm using the Debian Stable Exim packages too, so I guess this is something I can just cut'n'paste in! :-) And it seems I really need

Re: Simple e-mail virus scanner

Hi, Игорь Ляпин <[EMAIL PROTECTED]> writes: > Does the same approach could be use with sendmail ? Any examples? I guess, you could integrate this in . SpamAssassin already scans the email body for signs of spam, so it shouldn't be too hard, to add another regex. Alth

Re: Simple e-mail virus scanner

On Wed, Aug 20, 2003 at 08:26:53AM +0400, ? ? wrote: > Hello Noah, > Does the same approach could be use with sendmail ? Any examples? > > NLM> On Tue, Aug 19, 2003 at 10:56:29PM +0200, Kjetil Kjernsmo wrote: > >> > >> So, I'm wondering, does anybody know about any such approach? > > NLM

Re: Simple e-mail virus scanner

## Noah L. Meyerhans ([EMAIL PROTECTED]): > On Tue, Aug 19, 2003 at 10:56:29PM +0200, Kjetil Kjernsmo wrote: > > So, I'm wondering, does anybody know about any such approach? > After getting sick of all the virus crap in my inbox I installed the > following in /etc/exim/system_filter.txt: This app

Re: Simple e-mail virus scanner

On Wed, Aug 20, 2003 at 08:26:53AM +0400, ? ? wrote: > Hello Noah, > Does the same approach could be use with sendmail ? Any examples? > > NLM> On Tue, Aug 19, 2003 at 10:56:29PM +0200, Kjetil Kjernsmo wrote: > >> > >> So, I'm wondering, does anybody know about any such approach? > > NLM

Re: Simple e-mail virus scanner

## Noah L. Meyerhans ([EMAIL PROTECTED]): > On Tue, Aug 19, 2003 at 10:56:29PM +0200, Kjetil Kjernsmo wrote: > > So, I'm wondering, does anybody know about any such approach? > After getting sick of all the virus crap in my inbox I installed the > following in /etc/exim/system_filter.txt: This app

Re[2]: Simple e-mail virus scanner

Hello Noah, Does the same approach could be use with sendmail ? Any examples? NLM> On Tue, Aug 19, 2003 at 10:56:29PM +0200, Kjetil Kjernsmo wrote: >> >> So, I'm wondering, does anybody know about any such approach? NLM> After getting sick of all the virus crap in my inbox I installed the NLM> f

Re[2]: Simple e-mail virus scanner

Hello Noah, Does the same approach could be use with sendmail ? Any examples? NLM> On Tue, Aug 19, 2003 at 10:56:29PM +0200, Kjetil Kjernsmo wrote: >> >> So, I'm wondering, does anybody know about any such approach? NLM> After getting sick of all the virus crap in my inbox I installed the NLM> f

Re: Simple e-mail virus scanner

On Tue, Aug 19, 2003 at 10:56:29PM +0200, Kjetil Kjernsmo wrote: > > So, I'm wondering, does anybody know about any such approach? After getting sick of all the virus crap in my inbox I installed the following in /etc/exim/system_filter.txt: ##

Simple e-mail virus scanner

Dear all, I guess I'm not really looking for a "security solution", but I guess you folks are the most likely to know, so I try here... In the last couple of hours, I've got about 25 100KB of the recent Sobig.f M$ virus, along with about the same number of bogus "there was a virus in an e-mai

Re: Simple e-mail virus scanner

On Tue, Aug 19, 2003 at 10:56:29PM +0200, Kjetil Kjernsmo wrote: > > So, I'm wondering, does anybody know about any such approach? After getting sick of all the virus crap in my inbox I installed the following in /etc/exim/system_filter.txt: ##

Simple e-mail virus scanner

Dear all, I guess I'm not really looking for a "security solution", but I guess you folks are the most likely to know, so I try here... In the last couple of hours, I've got about 25 100KB of the recent Sobig.f M$ virus, along with about the same number of bogus "there was a virus in an e-mai