How about selectively blocking attachments, and only allow
things like .c .h .gz .bz2 to pass, that way one atleast has
to unzip the virus and start it or rename the file and start
it, this will probably be enough protection against little one
click accidents. I doubt RT-Linux programmers want to send .exe
or so to the list.
- Erwin
"Dresner, Norman A." wrote:
>
> Victor.
>
> Since (I assume) you're using a Linux system as the mail server and list
> processor, any of the otherwise very capable PC (i.e. Windows)-based virus
> checking programs (like Norton Anti-Virus) would be useless. (I was quite
> surprised to find that Symantec does make "enterprise" virus-checking
> programs for Solaris and some -- unfortunately unspecified in the one screen
> I found - flavor(s) of "unix".)
>
> If there are any native (open-source) Linux based solutions, I'd be in favor
> of installing one. If there is a commercial package we'd be able to
> purchase I'd even be willing to reach into my own pocket to contribute
> toward protecting the two windows-based PC's I use for e-mail.
>
> Remember that these viruses (at least presently) only target Windows (and
> possibly Mac) systems; Linux -- and other flavors of *NIX are immune.
>
> I'm on record as opposing a "no attachments" policy but it may still be the
> most effective solution.
>
> Norman Dresner
> Fellow Systems Engineer
> Radar Systems Engineering Department
> Electronic Systems and Sensors Segment
> Northrop Grumman Corporation
> MS 520
> Box 746
> Baltimore MD 21203
>
> Voice: (410) 993 - 2096 Mornings; all-day voice-mail
> (410) 969 - 8068 Afternoons with answering machine
> FAX: (410) 993 - 8084 On-site
> (410) 969 - 8068 Afternoons; call first to arrange
> E-Mail: Mornings: [EMAIL PROTECTED]
> Afternoons: [EMAIL PROTECTED]
>
> > -----Original Message-----
> > From: [EMAIL PROTECTED] [SMTP:[EMAIL PROTECTED]]
> > Sent: Tuesday, March 06, 2001 11:49 AM
> > To: Dresner, Norman A.
> > Cc: 'RTLinux'
> > Subject: Re: [rtl] FW: InterScan NT Virus Alert
> >
> > any suggestions on how to filter the list will be appreciated.
> >
> > On Tue, Mar 06, 2001 at 11:37:18AM -0500, Dresner, Norman A. wrote:
> > > Just received this message from my corporate "firewall" alerting me to
> > an
> > > incoming virus from RTL. I'm sure I'm not the only one that will
> > receive
> > > it.
> > >
> > >
> > > Norman Dresner
> > > Fellow Systems Engineer
> > > Radar Systems Engineering Department
> > > Electronic Systems and Sensors Segment
> > > Northrop Grumman Corporation
> > > Baltimore-Washington International Airport
> > > 7323 Aviation Boulevard
> > > Baltimore Maryland 21240
> > >
> > > Voice: (410) 993 - 2096 Mornings; all-day voice-mail
> > > (410) 969 - 8068 Afternoons with answering machine
> > > FAX: (410) 993 - 8084 On-site
> > > (410) 969 - 8068 Afternoons; call first to arrange
> > > E-Mail: Mornings: [EMAIL PROTECTED]
> > > Afternoons: [EMAIL PROTECTED] Message-----
> > > > From: Postmaster
> > > > Sent: Tuesday, March 06, 2001 10:43 AM
> > > > To: Dresner, Norman A.
> > > > Subject: InterScan NT Alert
> > > >
> > > > Please contact the Customer Service Center at (800) 272-6022 if you
> > > > require additional assistance.
> > > >
> > > > Date: Tue, 06 Mar 2001 10:42:40 -0500 (Eastern Standard Time)
> > > > Method: Mail
> > > > From: <[EMAIL PROTECTED]>
> > > > To: <[EMAIL PROTECTED]>
> > > > File: sexy virgin.scr
> > > > Action: clean failed - moved to sexy virgin.scr.24
> > > > Virus: TROJ_HYBRIS.D
> > > -- [rtl] ---
> > > To unsubscribe:
> > > echo "unsubscribe rtl" | mail [EMAIL PROTECTED] OR
> > > echo "unsubscribe rtl <Your_email>" | mail [EMAIL PROTECTED]
> > > --
> > > For more information on Real-Time Linux see:
> > > http://www.rtlinux.org/rtlinux/
> >
> > --
> > ---------------------------------------------------------
> > Victor Yodaiken
> > Finite State Machine Labs: The RTLinux Company.
> > www.fsmlabs.com www.rtlinux.com
> -- [rtl] ---
> To unsubscribe:
> echo "unsubscribe rtl" | mail [EMAIL PROTECTED] OR
> echo "unsubscribe rtl <Your_email>" | mail [EMAIL PROTECTED]
> --
> For more information on Real-Time Linux see:
> http://www.rtlinux.org/rtlinux/
-- [rtl] ---
To unsubscribe:
echo "unsubscribe rtl" | mail [EMAIL PROTECTED] OR
echo "unsubscribe rtl <Your_email>" | mail [EMAIL PROTECTED]
--
For more information on Real-Time Linux see:
http://www.rtlinux.org/rtlinux/
