procmail
[Top] [All Lists]

Re: virus recipe for MyDoom

2004-01-27 10:37:00
On Tue, Jan 27, 2004 at 09:24:38AM -0800, Bart Schaefer wrote:

On Tue, 27 Jan 2004, Nancy McGough wrote:

Another option is to use one of the generic virus-snagging recipes
that I have listed here:

 <http://www.ii.com/internet/robots/procmail/qs/#viruses>

I see you've got my set listed there.

My recipes won't catch the ZIP version because they're targeted at
constructs designed to trick the mail reader application into auto-
executing the attachment, or deliberate filename obfuscation.  They
don't do much to protect people from clicking on something they should
not.

Exactly.  Well said, and concisely.  Perhaps I will add a read-me
file to the gzipped file I provide stating this and telling users
they can add ZIP, etc., if they wish to, though it's against my
intent.

Dallman

_______________________________________________
procmail mailing list
procmail(_at_)lists(_dot_)RWTH-Aachen(_dot_)DE
http://MailMan.RWTH-Aachen.DE/mailman/listinfo/procmail

<Prev in Thread] Current Thread [Next in Thread>