Re: Blocking Bugbear

From: Graham Hillstomer (no email)
Date: Tue Oct 01 2002 - 08:50:42 EDT

• Next message: Michael Tokarev: "Re: Is wirehub's spamlist-extended.txt worth using?"
• Previous message: Graham Hillstomer: "Re: Anti Virus"
• Maybe in reply to: Maarten de Vries: "Blocking Bugbear"
• Next in thread: Michael Tokarev: "Re: Blocking Bugbear"
• Reply: Michael Tokarev: "Re: Blocking Bugbear"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

I am going way out on a string here but I would say it is better to use a virus scanner than header/body strings because as virus writers can use anything as a subject/body. Sure you can search for <iframe> and stop many viruses since <iframe> probably has no real purpose in ascii/rtf/html mail anyways.

> Has anyone found a decent header- or bodycheck to block Bugbear
> (http://www.sophos.com/virusinfo/analyses/w32bugbeara.html) yet?
>
> Cheers,
> --
> Maarten
>
> -
> To unsubscribe, send mail to with content
> (not subject): unsubscribe postfix-users
>

-- 
---
Graham Hillstomer II
Senior System Admin *BSD, HP-UX, Solaris
High Availability / Quality of Service Response Team Leader
-
To unsubscribe, send mail to  with content
(not subject): unsubscribe postfix-users

• Next message: Michael Tokarev: "Re: Is wirehub's spamlist-extended.txt worth using?"
• Previous message: Graham Hillstomer: "Re: Anti Virus"
• Maybe in reply to: Maarten de Vries: "Blocking Bugbear"
• Next in thread: Michael Tokarev: "Re: Blocking Bugbear"
• Reply: Michael Tokarev: "Re: Blocking Bugbear"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]