On Wed, 25 Feb 2004, 23:01 GMT+01 (23:01 local time) Dallman Ross
wrote:
So go ahead and use his stuff, I won't resent it at all, nor will
I think you're making a huge mistake or something. :-) I do
think all those scored body checks on all messages is rather a
bit of overhead of the type that I tried very hard to avoid for
most messages in mine (both in my published plug-in and in my
private spam runs).
I also haven't tried Nikos' YAVR because virus detection based on
known signatures isn't what I have in mind as ideal solution for
catching infected mails on the first layer. The need of updating to
the latest virus signatures is a hassle for me, and, of course, this
will never work on new viruses. Although, Nikos' work is very much
appreciated.
Using a generic method instead is what I have always preferred and
that is why I used to use your Virus Snaggers, until the problem of
the almost daily spreading of new zipped viruses arised.
To satisfy all these problems, including catching bad .com
attachments, while not false-positive detecting good files with bad
extensions, I have now written my own AntiVirus plugin for procmail.
The biggest advantage in this AntiVirus Filter, compared with
everything I have seen so far, is, that it catches all nasty
files that may arrive in a mailbox, regardless if they are attached
directly as Executable or packed within a ZIP archive.
Since it works like a charme for me, I decided to share it with the
public, released under the GNU GPL license, as free and Open Source
software. I call it "Softlabs AntiVirus" and it is available at
http://www.softlabs.info/antivirus/
The latest package is always downloadable at
http://www.softlabs.info/antivirus/SoftlabsAV.tar.gz (currently at
version 0.1) and the package's content may be browsed directly at
http://www.softlabs.info/antivirus/SoftlabsAV/
The ReadMe is found at
http://www.softlabs.info/antivirus/SoftlabsAV/ReadMe.txt
Thanks and
best regards,
rob.
_______________________________________________
procmail mailing list
procmail(_at_)lists(_dot_)RWTH-Aachen(_dot_)DE
http://MailMan.RWTH-Aachen.DE/mailman/listinfo/procmail