Re: Virus Emails

Hmmm - I'm pretty sure that uvscan won't automatically extract out MIME
attachements. You need to scan normal files.

We use inflex on our mail servers to extract all our emails before
scanning...

Chris

> -----Original Message-----
> From: Marc G. Fournier [mailto:scrappy(at)hub(dot)org]
> Sent: Tuesday, 30 July 2002 10:47 PM
> To: Larry Rosenman
> Cc: Christopher Kings-Lynne; pgsql-hackers(at)postgresql(dot)org
> Subject: Re: [HACKERS] Virus Emails
>
>
>
>
> Okay, am playing with this on one of my 'none-critical' servers right now
> ... tried to use uvscan from teh command line, and it didn't appear to
> pick up any of the Klez stuff, even though I know I have a few in my
> mailbox ...
>
> What options should I be running as? I'm using the following:
>
> uvscan --analyse --recursive --mime --summary --program /var/spool/mail
>
> On 28 Jul 2002, Larry Rosenman wrote:
>
> > On Sun, 2002-07-28 at 20:10, Marc G. Fournier wrote:
> > >
> > > God, I go through 200+ of those almost daily as moderator ...
> imagine if
> > > we had the lists open? :)
> > I picked up a copy of McAfee's vscan for FreeBSD from one of my contract
> > people, and have amavisd-milter running to prevent them from even
> > getting in the door.
> >
> > Mayhaps pgsql.org should do the same?
> >
> >
> > >
> > >
> > > On Sat, 27 Jul 2002, Christopher Kings-Lynne wrote:
> > >
> > > > Hi guys,
> > > >
> > > > I seem to be getting virus emails that pretend to be one of
> your guys. eg.
> > > > I get them from T.Ishii and N.Conway, etc. Anyone out
> there on the list who
> > > > should perhaps scan their computer? :)
> > > >
> > > > Chris
> > > >
> > > >
> > > >
> > > > ---------------------------(end of
> broadcast)---------------------------
> > > > TIP 5: Have you checked our extensive FAQ?
> > > >
> > > > http://www.postgresql.org/users-lounge/docs/faq.html
> > > >
> > >
> > >
> > > ---------------------------(end of
> broadcast)---------------------------
> > > TIP 3: if posting/reading through Usenet, please send an appropriate
> > > subscribe-nomail command to majordomo(at)postgresql(dot)org so that your
> > > message can get through to the mailing list cleanly
> > >
> > --
> > Larry Rosenman http://www.lerctr.org/~ler
> > Phone: +1 972-414-9812 E-Mail: ler(at)lerctr(dot)org
> > US Mail: 1905 Steamboat Springs Drive, Garland, TX 75044-6749
> >
> >
>