Re: [Exim] virus filter

Top Page
Delete this message
Reply to this message
Author: Matthew Byng-Maddick
Date:  
To: exim-users
Subject: Re: [Exim] virus filter
On Fri, Jun 21, 2002 at 02:35:56PM +0100, David Snowden wrote:
> Is the list of extensions based on known viruses, or on
> extensions which could potentially be used for viruses?


A mixture of the two, AIUI.

> Would it be possible for an attachment with a .eml suffix to
> be used to deliver a virus?


Yes, and indeed, this was one of the vectors for CodeRed propagation (or
was it Nimda, I forget). It was the one that had about 5 vectors. Including
attaching the .eml file, or downloading it from the infected website.

MBM

--
Matthew Byng-Maddick         <mbm@???>           http://colondot.net/