OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Tzafrir Cohen (tzafrirtechnion.ac.il)
Date: Mon Jan 14 2002 - 11:48:20 CST

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    On Mon, 14 Jan 2002, Denis HAVLIK wrote:

    > Folks,
    >
    > Why don't we make a really simple anti-virus program, which simply rejects
    > all .doc, .exe, etc attachements? I for one would love to have such a
    > possibility in postfix configuration. Something like:
    >
    > ***********************************************************************
    > Do yo want to bounce all emails with dangerous attachements(*) back to
    > sender? (Y/N)
    >
    > (*) .exe, .doc, (give a full list here) attachements are known as
    > source of computer viruses, and therefore potentially dangerous. While
    > many anti-virus programs exist, which scan such attachements, the
    > simplest way to make sure no viruses go trought is to deny ALL
    > attachements of these types. While very efficient, this solution may make
    > some of your users really mad at you, so use with care.
    > *************************************************************************
    >
    > WDYT?

    I wouldn't say that it stops *all* viruses. I figure that it is possible
    to embed some information inside HTML files. But it definetly removes
    almost all current virii and trojans.

    But yes, I think that given that it is very simple to implement, and
    consumes very little resources, it is worth giving such an option to the
    sysadmin.

    One thing though: Where exactly is this filtering performed in postfix?

    -- 
    Tzafrir Cohen                        /"\
    mailto:tzafrirtechnion.ac.il        \ /  ASCII Ribbon Campaign
    Taub 229, 972-4-829-3942,             X   Against  HTML  Mail
    http://www.technion.ac.il/~tzafrir   / \
    

    For help, email discuss-helpmandrakesecure.net; to unsubscribe send a message to discuss-unsubscribemandrakesecure.net. To visit MandrakeSecure, go to http://www.mandrakesecure.net/.