Re: Virus Emails

uvscan doesn't extract out MIME attachments but amavis does. You have to
have a whole lot of un archivers on the system for that reason.

Dave
On Tue, 2002-07-30 at 22:13, Christopher Kings-Lynne wrote:
> Hmmm - I'm pretty sure that uvscan won't automatically extract out MIME
> attachements. You need to scan normal files.
>
> We use inflex on our mail servers to extract all our emails before
> scanning...
>
> Chris
>
> > -----Original Message-----
> > From: Marc G. Fournier [mailto:scrappy(at)hub(dot)org]
> > Sent: Tuesday, 30 July 2002 10:47 PM
> > To: Larry Rosenman
> > Cc: Christopher Kings-Lynne; pgsql-hackers(at)postgresql(dot)org
> > Subject: Re: [HACKERS] Virus Emails
> >
> >
> >
> >
> > Okay, am playing with this on one of my 'none-critical' servers right now
> > ... tried to use uvscan from teh command line, and it didn't appear to
> > pick up any of the Klez stuff, even though I know I have a few in my
> > mailbox ...
> >
> > What options should I be running as? I'm using the following:
> >
> > uvscan --analyse --recursive --mime --summary --program /var/spool/mail
> >
> > On 28 Jul 2002, Larry Rosenman wrote:
> >
> > > On Sun, 2002-07-28 at 20:10, Marc G. Fournier wrote:
> > > >
> > > > God, I go through 200+ of those almost daily as moderator ...
> > imagine if
> > > > we had the lists open? :)
> > > I picked up a copy of McAfee's vscan for FreeBSD from one of my contract
> > > people, and have amavisd-milter running to prevent them from even
> > > getting in the door.
> > >
> > > Mayhaps pgsql.org should do the same?
> > >
> > >
> > > >
> > > >
> > > > On Sat, 27 Jul 2002, Christopher Kings-Lynne wrote:
> > > >
> > > > > Hi guys,
> > > > >
> > > > > I seem to be getting virus emails that pretend to be one of
> > your guys. eg.
> > > > > I get them from T.Ishii and N.Conway, etc. Anyone out
> > there on the list who
> > > > > should perhaps scan their computer? :)
> > > > >
> > > > > Chris
> > > > >
> > > > >
> > > > >
> > > > > ---------------------------(end of
> > broadcast)---------------------------
> > > > > TIP 5: Have you checked our extensive FAQ?
> > > > >
> > > > > http://www.postgresql.org/users-lounge/docs/faq.html
> > > > >
> > > >
> > > >
> > > > ---------------------------(end of
> > broadcast)---------------------------
> > > > TIP 3: if posting/reading through Usenet, please send an appropriate
> > > > subscribe-nomail command to majordomo(at)postgresql(dot)org so that your
> > > > message can get through to the mailing list cleanly
> > > >
> > > --
> > > Larry Rosenman http://www.lerctr.org/~ler
> > > Phone: +1 972-414-9812 E-Mail: ler(at)lerctr(dot)org
> > > US Mail: 1905 Steamboat Springs Drive, Garland, TX 75044-6749
> > >
> > >
> >
>
>
> ---------------------------(end of broadcast)---------------------------
> TIP 3: if posting/reading through Usenet, please send an appropriate
> subscribe-nomail command to majordomo(at)postgresql(dot)org so that your
> message can get through to the mailing list cleanly
>
>