[EXIM] General Mail filter for Macro virues

Top Page
Delete this message
Reply to this message
Author: Liam Helmer
Date:  
To: Exim
Subject: [EXIM] General Mail filter for Macro virues


----------
>From: "Liam Helmer" <exim@???>
>To: chris.bannister@???
>Subject: General Mail filter for Macro virues
>Date: Thu, Apr 1, 1999, 6:04 AM
>


> This is from another list that I'm on. It's about a procmail filter, but,
> I'm sure the concepts could be adapted to an Exim filter if someone is
> creative about it:
>
>> I have added some rudimentary scanning for possibly hostile macros in
>> Microsoft Word and Excel attachments to my Procmail-based email
>> sanitizer. This scanning is for code fragments that do things that
>> shouldn't be in document macros rather than any particular variant of
>> an existing virus or worm, so it should be generally effective.
>>
>> I'd like to have some third-party comment and beta testing before I
>> release it. Anyone interested should send me some email at
>> <jhardin@???> and I'll send the html-trap.procmail filter
>> with the added attachment scanning code.
>>
>> I hope to publicly release this modification tomorrow or Friday.
>>
>> For further information on the Procmail e-mail sanitizer, visit
>> ftp://ftp.rubyriver.com/pub/jhardin/antispam/procmail-security.html
>>
>> --
>>  John Hardin KA7OHZ                               jhardin@???
>>  pgpk -a finger://gonzo.wolfenet.com/jhardin    PGP key ID: 0x41EA94F5
>>  PGP key fingerprint: A3 0C 5B C2 EF 0D 2C E5  E9 BF C8 33 A7 A9 CE 76
>> -----------------------------------------------------------------------
>>   In the Lion
>>   the Mighty Lion
>>   the Zebra sleeps tonight...
>>   Dee de-ee-ee-ee-ee de de de we um umma way!
>> -----------------------------------------------------------------------
>>    48 days until Star Wars episode I


--
*** Exim information can be found at http://www.exim.org/ ***