On Wed, 18 Feb 2015, David F. Skoll wrote:

On Wed, 18 Feb 2015 09:56:56 -0700
Jesse Norell <je...@kci.net> wrote:

  Another option might be to add a virus scanner to your pop/imap
server, so mail is re-scanned before being sent to the client?

I wrote some Perl to try to detect MS Office documents with macros in
them.  I'm not sure it's 100% successful, but it does seem to detect
a large percentage of them.  Unfortunately, I found out to my dismay
that quite a few legitimate MS Office documents have macros, so you can
only use this to add points, not to reject.

Macros are not inherently evil. Macros that dig around in the registry or try to retrieve stuff over the network are evil.

--
 John Hardin KA7OHZ                    http://www.impsec.org/~jhardin/
 jhar...@impsec.org    FALaholic #11174     pgpk -a jhar...@impsec.org
 key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
  Insofar as the police deter by their presence, they are very, very
  good. Criminals take great pains not to commit a crime in front of
  them.                                             -- Jeffrey Snyder
-----------------------------------------------------------------------
 4 days until George Washington's 283rd Birthday

Reply via email to