Great Circle Associates Firewalls
(May 1994)
 

Indexed By Date: [Previous] [Next] Indexed By Thread: [Previous] [Next]

Subject: Re: FTP Security
From: tkevans @ eplrx7 . es . duPont . com (Tim Evans)
Date: Thu, 12 May 1994 12:03:54 -0400 (EDT)
To: mjr @ tis . com (Marcus J Ranum)
Cc: Firewalls @ greatcircle . com, mstickle @ lvh . com
In-reply-to: <9405121507 . AA10173 @ tis . com> from "Marcus J Ranum" at May 12, 94 11:07:44 am

Sez Marcus J Ranum (for which I'm grateful):
>
>	Scanning for DOS virii on a UNIX box is also a bit of a
>wild goose chase. Why? Because any DOS executable that's being
>transmitted through the UNIX box is probably encoded for transmission
>and then you have the whole issue of figuring out what the encoding
>is and means...
>
IBM's AIX does have a 'virscan' command which can examine DOS executables
for a pre-set list of well-known virus "signatures."  As Marcus 
notes, encoded stuff can't be scanned, but if it's unpacked under
AIX, 'virscan' might be useful.

-- 
Tim Evans                     |    E.I. du Pont de Nemours & Co.
tkevans @
 eplrx7 .
 es .
 dupont .
 com  |    Experimental Station
(302) 695-9353/8638 (FAX)     |    P.O. Box 80357
EVANSTK AT A1 AT ESVAX        |    Wilmington, Delaware 19880-0357


References:
Indexed By Date Previous: Re: FTP Security
From: Marcus J Ranum <mjr @ tis . com>
Next: Re: Livingston Firewall Configurations
From: kozowski @ sd . com (Eric Kozowski)
Indexed By Thread Previous: Re: FTP Security
From: Marcus J Ranum <mjr @ tis . com>
Next: Re: FTP Security
From: tws @ mrc . com

Google
 
Search Internet Search www.greatcircle.com