Also there is a nice way of thinking in the unix world, that windows apps tend to fail to embrace, which causes these monsterously complex applications that have bugs all over and always lack some particular functionality you want. One tool for one job. Then integrate the tools you want in the way you want to get the job done. Leave file analysis to the tool that is meant to do it, thus not recreating the wheel. Also, who wants to sit around and write regex's for such items individually when there are thousands of contributors around the world submitting signatures to clam's db??
-----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dickson, Paul Sent: Thursday, August 02, 2007 8:13 AM To: Matti Haack; Questions and Answers for users of ASSP Anti-Spam SMTP Proxy Subject: Re: [Assp-user] PDF SPAM I tend to think that would be detrimental to the server load, and way overkill. Not to mention, email is a broad enough target as it is to classify correctly.. I can't imagine trying to intelligently classify something with exponentially greater variances. -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Matti Haack Sent: Thursday, August 02, 2007 5:53 AM To: Questions and Answers for users of ASSP Anti-Spam SMTP Proxy Subject: Re: [Assp-user] PDF SPAM > If it had to stop and save each message to disk, extract the pdf, > analyze it, then deliver it if it passes.....it would just be slower > than a snail stuck in molasses in the arctic, and it would'nt work. But I think the virusscanning just do this: scan the whole message and them forward it. So why not handle an "Atachment content scan" like virusscanning? Maybe we can use the same data passed to clamd and do a content scan. Matti - Matti Haack - Hit Haack IT Service Gmbh Poltlbauer Weg 4, D-94036 Passau +49 851 50477-22 Fax: +49 851 50477-29 http://www.haack-it.de Registergericht Passau HRB 5678 USt. ID: DE195625715 Besuchen Sie jetzt unseren neuen INTERNET&NETWORK Security Shop mit faszinierenden Angeboten rund um Ihre Netzwerk- Sicherheit: http://www.inn.de -- Ausgehende E-Mail wurde auf Viren gescannt -- ------------------------------------------------------------------------ - This SF.net email is sponsored by: Splunk Inc. Still grepping through log files to find problems? Stop. Now Search log events and configuration files using AJAX and a browser. Download your FREE copy of Splunk now >> http://get.splunk.com/ _______________________________________________ Assp-user mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/assp-user ------------------------------------------------------------------------ - This SF.net email is sponsored by: Splunk Inc. Still grepping through log files to find problems? Stop. Now Search log events and configuration files using AJAX and a browser. Download your FREE copy of Splunk now >> http://get.splunk.com/ _______________________________________________ Assp-user mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/assp-user ------------------------------------------------------------------------- This SF.net email is sponsored by: Splunk Inc. Still grepping through log files to find problems? Stop. Now Search log events and configuration files using AJAX and a browser. Download your FREE copy of Splunk now >> http://get.splunk.com/ _______________________________________________ Assp-user mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/assp-user
