> > If you want to filter these, try something that's designed
> > for the purpose.
> 
> Correction: "If you want to filter [viruses], try something
> that's designed for the purpose."
> 
> I feel that a rule to catch .exe attachments would be great.
> However, if this gets taken as far as blocking .vbs files,
> then you're treading into the realm of viruses.

I personally couldn't care less about doing generalized virus scanning.
If you're unfortunate enough to use windows and don't bother to apply
patches or a decent virus scanner on your client, that's your problem. 

I am however concerned about the constant load on my mail server dealing
with the worm traffic from these klez/melissa/hybrid/etc. infections.
Those are "Unsolicited Bulk EMail" in my book. The fact that they are a
virus is really a side issue.

I would not be interested in putting in rules for catching every pissant
windows virus out there, however, if there were a provided set of rules
(i.e. in a contrib section or similar) that would catch the
headline-making-windows-worms stuff, that would be a great improvement.
(I understand the reasons for not making SA into a general purpose virus
scanner - and agree with them. Most of us I'd say are not asking for a
general purpose one.)

If you don't want to have them in the main distribution - that's fine,
but instead of forcing all the SA users that want to do minimalist worm
scanning to reinvent the wheel, stick some samples that work in a
contrib area.

-- Nathan

------------------------------------------------------------
Nathan Neulinger                       EMail:  [EMAIL PROTECTED]
University of Missouri - Rolla         Phone: (573) 341-4841
Computing Services                       Fax: (573) 341-4216

_______________________________________________________________

Have big pipes? SourceForge.net is looking for download mirrors. We supply
the hardware. You get the recognition. Email Us: [EMAIL PROTECTED]
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk

Reply via email to