OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Tzafrir Cohen (tzafrirtechnion.ac.il)
Date: Tue Jan 15 2002 - 11:45:01 CST

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    On 15 Jan 2002, Bill Kenworthy wrote:

    > There's also "anomy", a perl script that does all this and more.I am
    > using it via procmail/postfix and other than false alarming (warning
    > message) on the Mandrake list coz its footer gets included as an
    > attached text document.

    What's wrong with a text/plain part?

    > It picks up the usual virii attachments quite
    > reliably, defangs html mail (embedded scripts etc in the html) and also
    > perl/shell scripts etc (inserts an "exit" statement and comment at the
    > top of the file so it cant be run by accident!)

    Sounds very intrusive to me.

    A decent mail program does not execute scripts. If my mailer (OK, it
    probably has a number of buffer overflows somewhere, but it is rather sane
    apart from that) gets some script, it simply displays it to me.

    Now if some support guy sent Joe User a script to use, he had to work
    around those strange (=unexpected) limitations

    > It can also call a true
    > viris scanner to scan documents you want to let through, but need
    > checking internally.

    IMHO you should not try to overly clean. I rather have a virus scanner
    bounce a message than trying to clean it, and possibly creating an
    incorrect content.

    > The documents have some discussion on performance
    > tuning, which from memory was quite acceptable considering what it is
    > doing.A good first line for Linux users and

    For linux users?

    Linux users have decent mail clients (read: not many people used Outlook
    & co. on linux lately)

    -- 
    Tzafrir Cohen                        /"\
    mailto:tzafrirtechnion.ac.il        \ /  ASCII Ribbon Campaign
    Taub 229, 972-4-829-3942,             X   Against  HTML  Mail
    http://www.technion.ac.il/~tzafrir   / \
    

    For help, email discuss-helpmandrakesecure.net; to unsubscribe send a message to discuss-unsubscribemandrakesecure.net. To visit MandrakeSecure, go to http://www.mandrakesecure.net/.