At 02:27 PM 6/15/2007, Michael Scheidell wrote:
>Well, an attachment, a 0 day virus.
>
>How do we block an exe insite a .doc?

I believe if you have the 'ripole' tool and uncomment (or add) the 
@decoders entry
# 'doc',  \&do_ole,         'ripole'
Then the .exe file will be available to the regular banned_filename_* tools.
Haven't tested this lately, but it used to (mostly) work.  Sometimes 
the ripole tool gets confused, but it seems to work on this particular doc.

ripole can be found at http://www.pldaniels.com/ripole/



-- 
Noel Jones 


-------------------------------------------------------------------------
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and take
control of your XML. No limits. Just data. Click to get it now.
http://sourceforge.net/powerbar/db2/
_______________________________________________
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/

Reply via email to