>Any suggestions on detecting viruses and bouncing them before they are
>resent. Or suggestions on detecting attachment and removing them before
>they are sent will be appreciated.
put
/^content-type:.*\.(exe|com|zip|vbs|shs|hta|scr|chm)/i
/kak\.hta/
in taboo_body. The first line catches all the trojan-type attachments, and
the second is an example of catching things like kak - you can nab other
such scripting attacks by choosing a similar keyword or two from the script.
_______________________________________________________________________
Will Bryant, will@core-dev.co.nz cell +64 21 655 443
http://www.core-dev.co.nz/ Personal: http://www.core-dev.co.nz/will/
ShareChat Ltd. technical manager http://www.sharechat.co.nz/
[PGP 0x96A7F40A, FP 827F A2A9 C718 106D 8F80 E16E A244 D5F2 96A7 F40A]
References:
|
|
