Re: [Exim] needed: beagle/bagle pattern

Top Page
Delete this message
Reply to this message
Author: Kevin Reed
Date:  
To: exim-users
Subject: Re: [Exim] needed: beagle/bagle pattern
Jonathan Vanasco said:
> someone on the list was nice to share a string pattern that blocked
> sobig through exiscan a few months ago
>
> has anyone come up with one for the beagle/bagle threat?
>
> i tried using signatures from the perl File::Scan module, but that
> didn't work out
>
> i simply dont have enough time to install clam av or any other virus
> scanner on the mail system, as much as I want to, and would like to
> take as many preemptive measures as possible


Deny exe attachments and you have done it.

--
Kevin W. Reed - TNET Services, Inc.
Unoffical Exim MTA Info Forums - http://exim.got-there.com/forums