Re: Busy day for worms! Filtering

From: Nancy McGough (nm-reverse-spam-filter_at_ii.deflexion.com)
Date: 01/27/04 

Date: Tue, 27 Jan 2004 20:24:37 +0000

On 27 Jan 2004 Nancy McGough (nm-reverse-spam-filter@ii.deflexion.com) wrote:
> Another option if you use procmail is to use Dallman Ross's Virus
> Snagger recipes. I discuss plugging them into your procmail setup
> here:
>
> <http://www.ii.com/internet/robots/procmail/qs/#viruses>
>
> They are snagging a lot of viruses for me right now!

It turns out that when I wrote the message above, my incarnation
of Dallman's Virus Snaggers were not snagging all the current
viruses. I've now updated them so that they are and I've
documented what I did here:

  <http://www.ii.com/internet/robots/procmail/qs/#viruses>

Note the section about the NASTYEXT (nasty extensions) variable.
If you use the Virus Snaggers, make sure that you read all the
caveats.

Also, I recommend that everyone who is trying to snag these
viruses with Procmail, read this thread:

 <http://thread.gmane.org/gmane.mail.procmail/9684>

Hope this helps,
Nancy

PS - Feedback about what I've written on my Procmail Quick Start
     is welcome! 

-- 
Nancy McGough
Infinite Ink ~ <http://www.ii.com>
Deflexion & Reflexion (my atom-enabled blog) ~ <http://deflexion.com>

Relevant Pages

  • Re: FYI: Fetchmail saves the day!
    ... > e-mail to another account. ... > Then I kick it off with 'fetchmail' and it works! ... I've been looking over that virus, and if you were willing to kill any ... With procmail you could pipe all mail not from someone on your passlist ...
    (comp.os.linux.misc)
  • Re: Exim and spamassasin
    ... >>You can also try a variety to packages that will run virus checks as well. ... > Can you give some pointers for virus checks and procmail scenario? ...
    (Debian-User)
  • Re: Exim and spamassasin
    ... Using webmin-spamassassin, there is an option to set up the procmail. ... For virus scans, I did a google from procmail AND clamav. ... Procmail is enabled in exim4 by having the customary router/transport pair: ...
    (Debian-User)
  • Re: Busy day for worms! Filtering
    ... Nancy McGough wrote: ... > PS - Feedback about what I've written on my Procmail Quick Start ... I recommend your guide ...
    (comp.os.linux.security)
  • Re: filter email attachment with certain extension
    ... > rules - file extensions? ... Use procmail. ...
    (comp.os.linux.security)