RE: [SAtalk] Klez + Worms, etc.

2002-09-17 Thread Smart, Dan
Subject: Re: [SAtalk] Klez + Worms, etc. | | | |>> but I notice it doesn't seem to catch any of the many |worms/viruses, |>> etc. like Klez... | |Lars> That's because SA isn't an anti-virus scanner. | |>> Is there a way to configure SA to attack these

Re: [SAtalk] Klez

2002-05-20 Thread Sidney Markowitz
On Mon, 2002-05-20 at 17:17, Ed Kasky wrote: > Could you post that procmail recipe to the list? I started to, then did not because I have been lazy and took a shortcut with it that really should be fixed before anyone else uses it. But I'll post it now with lots of comments added. Maybe someone w

Re: [SAtalk] Klez

2002-05-20 Thread Ed Kasky
Sidney - Could you post that procmail recipe to the list? Ed ~~ At 04:27 PM Monday, 5/20/2002, Sidney Markowitz wrote -=> >On Mon, 2002-05-20 at 14:18, Peter Scott wrote: > > Does anyone have a rule for matching the Klez virus? > >Following Craig's suggestion, made earlier on this list, I instal

Re: [SAtalk] Klez

2002-05-20 Thread Sidney Markowitz
On Mon, 2002-05-20 at 14:18, Peter Scott wrote: > Does anyone have a rule for matching the Klez virus? Following Craig's suggestion, made earlier on this list, I installed f-prot for virus scanning and call it from procmail before any other filters, sending any catches to /dev/null. That replaced

[SAtalk] Klez

2002-05-20 Thread Peter Scott
Does anyone have a rule for matching the Klez virus? Normally I wouldn't confound spam protection with virus protection, but this is one I want to head off before it even gets downloaded. -- Peter Scott Pacific Systems Design Technologies __

Re: [SAtalk] Klez virus (and Snowhite), yet again

2002-05-17 Thread dman
On Fri, May 17, 2002 at 11:44:30AM -0700, Michael C. Berch wrote: | Just in the last week, the number of messages with what I assume to be | the Klez virus or a variant has exploded, at least for me. Since we | have no Windows machines I don't pay a lot of attention to email viruses | and othe

Re: [SAtalk] Klez virus (and Snowhite), yet again

2002-05-17 Thread William Porquet
Dear Michael, This is the /etc/procmailrc file I use to take out spam and virus attachments... -- :0fw | /usr/bin/spamassassin -P -c /usr/local/share/spamassassin/ :0: * ^X-Spam-Status: Yes /var/spool/mail/spam :0 HB: * ^Content-Type:.*(application|audio|multipart) * name=.*\.(bat|exe|pif|vbs

[SAtalk] Klez virus (and Snowhite), yet again

2002-05-17 Thread Michael C. Berch
Just in the last week, the number of messages with what I assume to be the Klez virus or a variant has exploded, at least for me. Since we have no Windows machines I don't pay a lot of attention to email viruses and other malware, but I'm getting 20+ a day, all different insofar as From and