Re: Virus Emails

Started by Dave Cramerover 24 years ago1 messages
#1Dave Cramer
dave@fastcrypt.com

uvscan doesn't extract out MIME attachments but amavis does. You have to
have a whole lot of un archivers on the system for that reason.

Dave

Show quoted text

On Tue, 2002-07-30 at 22:13, Christopher Kings-Lynne wrote:

Hmmm - I'm pretty sure that uvscan won't automatically extract out MIME
attachements. You need to scan normal files.

We use inflex on our mail servers to extract all our emails before
scanning...

Chris

-----Original Message-----
From: Marc G. Fournier [mailto:scrappy@hub.org]
Sent: Tuesday, 30 July 2002 10:47 PM
To: Larry Rosenman
Cc: Christopher Kings-Lynne; pgsql-hackers@postgresql.org
Subject: Re: [HACKERS] Virus Emails

Okay, am playing with this on one of my 'none-critical' servers right now
... tried to use uvscan from teh command line, and it didn't appear to
pick up any of the Klez stuff, even though I know I have a few in my
mailbox ...

What options should I be running as? I'm using the following:

uvscan --analyse --recursive --mime --summary --program /var/spool/mail

On 28 Jul 2002, Larry Rosenman wrote:

On Sun, 2002-07-28 at 20:10, Marc G. Fournier wrote:

God, I go through 200+ of those almost daily as moderator ...

imagine if

we had the lists open? :)

I picked up a copy of McAfee's vscan for FreeBSD from one of my contract
people, and have amavisd-milter running to prevent them from even
getting in the door.

Mayhaps pgsql.org should do the same?

On Sat, 27 Jul 2002, Christopher Kings-Lynne wrote:

Hi guys,

I seem to be getting virus emails that pretend to be one of

your guys. eg.

I get them from T.Ishii and N.Conway, etc. Anyone out

there on the list who

should perhaps scan their computer? :)

Chris

---------------------------(end of

broadcast)---------------------------

TIP 5: Have you checked our extensive FAQ?

http://www.postgresql.org/users-lounge/docs/faq.html

---------------------------(end of

broadcast)---------------------------

TIP 3: if posting/reading through Usenet, please send an appropriate
subscribe-nomail command to majordomo@postgresql.org so that your
message can get through to the mailing list cleanly

--
Larry Rosenman http://www.lerctr.org/~ler
Phone: +1 972-414-9812 E-Mail: ler@lerctr.org
US Mail: 1905 Steamboat Springs Drive, Garland, TX 75044-6749

---------------------------(end of broadcast)---------------------------
TIP 3: if posting/reading through Usenet, please send an appropriate
subscribe-nomail command to majordomo@postgresql.org so that your
message can get through to the mailing list cleanly