On 7/3/19 7:11 PM, Riccardo Alfieri wrote: > On 03/07/19 17:59, atat wrote: > >> You say in documentation: >> >> You should also drop, by default, all Office documents with macros. >> >> What plugin / method do You reccomend for that ? > > I'm no expert in detecting macros, but there at least two ways of doing that > that comes to mind: > > - Clamav with the option OLE2BlockMacros > > - This package https://github.com/bigio/spamassassin-vba-macro > This has been superseded by https://svn.apache.org/repos/asf/spamassassin/trunk/lib/Mail/SpamAssassin/Plugin/OLEMacro.pm the plugin is for trunk but it works out of the box in 3.4.3rc3 as well (some work is needed to let it work on 3.4.2) Giovanni
- Re: Spamhaus Technology contributions to SpamAss... @lbutlr
- Re: Spamhaus Technology contributions to Spa... Riccardo Alfieri
- Re: Spamhaus Technology contributions to... Larry Rosenman
- Re: Spamhaus Technology contributions to SpamAss... David Gibbs
- Re: Spamhaus Technology contributions to Spa... Riccardo Alfieri
- Re: Spamhaus Technology contributions to... David Gibbs
- Re: Spamhaus Technology contributio... Riccardo Alfieri
- Re: Spamhaus Technology contributions to SpamAssassin Michael Orlitzky
- Re: Spamhaus Technology contributions to SpamAssassin atat
- Re: Spamhaus Technology contributions to SpamAssassi... Riccardo Alfieri
- Re: Spamhaus Technology contributions to SpamAss... Giovanni Bechis
- Re: Spamhaus Technology contributions to Spa... micah anderson
- Re: Spamhaus Technology contributions to SpamAssassin Larry Rosenman
- Re: Spamhaus Technology contributions to SpamAssassi... Riccardo Alfieri
- Re: Spamhaus Technology contributions to SpamAssassin Chris Conn
- Re: Spamhaus Technology contributions to SpamAssassi... Riccardo Alfieri
- Re: Spamhaus Technology contributions to SpamAssassin Stephan Seitz