OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Subject: Re: Filtering .vbs attachments? (Was: Re: Changed subject (was Re: reg. virus named ...)
From: Bennett Todd (betrahul.net)
Date: Thu May 04 2000 - 18:22:12 CDT

2000-05-04-18:56:54 Susie Ward:
> Did we decide that there is no way to filter any email with a .vbs
> attachment? or this specific attachment?

Postfix currently includes no provisions whatsoever for scrutinizing
the body of a message.

Lars Hecking posted a note on April 20, with the subject "Postfix
and virus checking - solution", that describes how to approach the
problem; you run two Postfixes, the one with the smtp listener does
all delivery through a pipe transport that runs the checks, and
passes the results on to the other postfix via /usr/lib/sendmail.

So a good program is needed to do the scanning. I'm working on one
to my tastes now, Lars described how to use amavis for the job.

To check for a specific sort of attachment you have to scan the
body, since the MIME "headers" that define the attachment type occur
within the RFC 822 body of the message, which Postfix does not
currently have any way to scrutinize.

-Bennett

  • application/pgp-signature attachment: stored