Re: Researching spamblock/antivirus/attachment filters on mail servers

From: Jem Berkes (jb_at_users.pc9.org)
Date: 09/04/03 

Date: 3 Sep 2003 23:07:50 GMT

> When Sobig.F hit the local MTA, I started to look for a filter to block
> it. I looked at some common approaches, and my first impression was
> that the filters would be pretty easy to bypass. Which again means that
> lot's of MTA's may be vulnerable for the next attachment plague.

I'm currently developing renattach 1.2.0, a complete rewrite of my very
efficient email attachment filter. When I started this project I just had
it simply rename attachments; the next version will do much more (including
rewrite MIME headers for safety, drop entire emails -- should be useful
when the next flood comes).

The software I have on this site is version 1.1.1, WARNING: it's oudated!
http://www.pc-tools.net/unix/renattach/

Version 1.2.0 is coming along nicely but I need more people to help with
testing. There is currently someone at the Medical University of South
Carolina that is helping out tremendously.

Relevant Pages

  • Re: Researching spamblock/antivirus/attachment filters on mail servers
    ... I looked at some common approaches, and my first impression was ... efficient email attachment filter. ... rewrite MIME headers for safety, drop entire emails -- should be useful ...
    (comp.security.misc)
  • Re: MAX value of a column that has #div/0 errors in it
    ... I don't know this for sure, but my first impression is that the ... conditional formula is not the place to filter out the DIV/0 errors. ...
    (microsoft.public.excel.misc)
  • Re: ADV: New Dance Event
    ... my first impression of the page was "Poor use of the medium". ... Second, your filter excludes logo*.gif? ... it didn't exclude it when I used ... Why aren't you filtering on *logo* to exclude all images with logo in its ...
    (rec.arts.dance)