Re: [exim] an antivirus for zero-day :)

Author: Lena
Date:
To: exim-users
CC: Paul Lenz
Subject: Re: [exim] an antivirus for zero-day :)

One more correction:

       set acl_m_ud = ${sg{$mime_decoded_filename}{[^/]+\$}{}}
       condition = ${run{SHELL -c \
         "cd $acl_m_ud; \
          P7ZIP x -y $mime_decoded_filename; \
          GREP -r -a -s -E \
           'rundll32|This program cannot be run in DOS mode|\
            This program must be run under|Embedded Object|\
            WScript\\.Sh|Shell\\.Application|Location: file:' \
           $acl_m_ud" >/dev/null}{1}{0}}

This message is part of the following thread:
	the complete thread tree sorted by date
	Lena at