procmail
[Top] [All Lists]

Re: procmail and virus

2001-12-13 13:15:58
On Thu, 13 Dec 2001, Lars Hecking wrote:

[...]
#  sed(1) will save the header.  metamail(1) exctract (decode?) the message.
/bin/sed "/^From /,/^$/w $head" | /usr/bin/metamail -r -y -w -q -x 
2>/dev/null

 You should use reformime instead. metamail is old, buggy, and basically
 unmaintained. IIRC it cannot deal with multipart/alternative message,
 which then make an excellent inroad for (VBS) script worms/viruses,

        Thanks Lars, I didn't know that metamail is unmaintained and
        it is very disappointing me.  Now, we have big dilemma, on one
        hand metamail dosen't deal with multipart/alternative on the other
        hand reformime dosen't deal with uuencode (I think(?)).  Are we
        going to load two proccess for one email message? uudecode and/or
        reformime just for beckup?   Yet, my solution is:

                grep -i -v "multipart/alternative" $MESSAGE | metamail ...

        It works; Nice and satisfactory  (:-)  
        The antivirus (F-prot in my case) can recognize VBS from a message.

Bye,
 Udi

_______________________________________________
procmail mailing list
procmail(_at_)lists(_dot_)RWTH-Aachen(_dot_)DE
http://MailMan.RWTH-Aachen.DE/mailman/listinfo/procmail

<Prev in Thread] Current Thread [Next in Thread>