I don't see how you can protect against such viruses.
I see how you can filter subjects, bodies, filenames, once
the virus is known. but unless you reject emails containing vbscripts,
you're out of luck.
The guy could restart tomorrow, using a subject=hello, body=enjoy this funny
program
and attachment=linuxisgood.vbs.
there wre melissa. then it's love. not much has changed since!
except that now you can add a new regexp to your sendmailpostfix/qmail/...
The real problem is that users are used to execute things cos' it's fun and
they will only
be careful if "it" happens to them (now count all the people using the net
and imagine
the net when it happens to them all!).
mouss
> -----Original Message-----
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]]On Behalf Of Jochen Kaiser
> Sent: Friday, May 05, 2000 4:58 AM
> To: Mandy Andress
> Cc: [EMAIL PROTECTED]
> Subject: Re: Linux content scanning
>
>
> On Thu, May 04, 2000 at 01:38:46PM -0700, Mandy Andress wrote:
> > We are using Linux IPChains for our firewall. Are there any products
> > available for Linux that do content scanning? I'm really looking for
> > something that would protect us from things like the ILoveYou virus.
> >
> > Thanks,
> > Mandy
> >
> >
> Just look at:
>
> http://www.securityportal.com/lasg/servers/email/index.html
>
> And search for the keyword Amavis
>
> There is described a method how you can combine sendmail and
> postfix with scanning software.
>
> enjoy.
>
> I know there is a dedicated paper about it on seifried.org .
> But I do not find it atm.
>
> with kind regards,
> Jochen Kaiser
>
> --
> Jochen Kaiser kind@IRCNET, phone +49 9131 85-28134
> Network Administration mailto:[EMAIL PROTECTED]
> Regionales Rechenzentrum Universitaet Erlangen-Nuernberg, Germany
>
> -
> [To unsubscribe, send mail to [EMAIL PROTECTED] with
> "unsubscribe firewalls" in the body of the message.]
>
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
