Hi Michael > > How would you, for example, propose to catch a polymorphic > executable > > virus? Our code catches these using a disassembler and > examining the code > > to see if it tries to do something malicious. > > I don't really care what the code is trying to do. I would be happy > to discard all executables. Every single one I receive is junk.
In case it's for a complete server and you're using sendmail: go for mimedefang, (http://www.roaringpenguin.com/mimedefang/) it's very nice for mangling mails based on mime type and/or file extensions. I'm running mimedfang as a sendmail milter and use it to launch both a virus scanner and spamassassin checks. Bye, Martin _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk