[Exim-Announce] Windows generic executable filter - Version …

Top Page
Delete this message
Reply to this message
Author: Nigel Metheringham
Date:  
To: exim-announce
Subject: [Exim-Announce] Windows generic executable filter - Version 0.09
[I did announce this on the exim-users list 10 days ago, but am
resending to this list]

I have made a new version of the Exim Windows generic executable
filter, taking it to version 0.09.

The filter, which runs as a system filter, attempts to detect messages
with attachments that may contain executables under windows. These
could potentially be trojans, virus infected or other problematic
content. A number of windows based email worms/viruses send out
messages which will be detected and blocked by the filter.

The method of detecting MIME attachments using regular expressions is
very limited. However its a low cost and so far quite effective means
of blocking attacks from the various windows email problems.

Instructions for installation are included within the file.

The filter is available at
    ftp://ftp.exim.org/pub/filter/
    http://www.exim.org/system_filter.exim


The MD5 is
6d17e5999c36e2a2297bfdc7a0bb771d system_filter.exim

    Nigel.


-- 
[ - Opinions expressed are personal and may not be shared by VData - ]
[ Nigel Metheringham                  Nigel.Metheringham@??? ]
[ Phone: +44 1423 850000                         Fax +44 1423 858866 ]