Re: Researching spamblock/antivirus/attachment filters on mail servers
From: Jem Berkes (jb_at_users.pc9.org)
Date: 3 Sep 2003 23:07:50 GMT
> When Sobig.F hit the local MTA, I started to look for a filter to block
> it. I looked at some common approaches, and my first impression was
> that the filters would be pretty easy to bypass. Which again means that
> lot's of MTA's may be vulnerable for the next attachment plague.
I'm currently developing renattach 1.2.0, a complete rewrite of my very
efficient email attachment filter. When I started this project I just had
it simply rename attachments; the next version will do much more (including
rewrite MIME headers for safety, drop entire emails -- should be useful
when the next flood comes).
The software I have on this site is version 1.1.1, WARNING: it's oudated!
Version 1.2.0 is coming along nicely but I need more people to help with
testing. There is currently someone at the Medical University of South
Carolina that is helping out tremendously.