Hello Klaus,
if you use ClamAV, then you can set it's option "OLE2BlockMacros true". This
detects MS Office Macros regardless of the file extension. If a macro is found,
then the file is classified as a virus ("INFECTED:
Heuristics.OLE2.ContainsMacros").
Regards,
Christian
> -Original Me
I turned on "OLE2BlockMacros true", but a word file containing a macro
virus was not classified as "INFECTED". I had renamed the file before
sending a test mail.
Any ideas what could I do to get all files with macros to be
quarantined?
Kind regards
Thomas
-Original Message-
From: am
, 2017 2:08 AM
To: amavis-users@amavis.org
Subject: Re: Quarantine doc Files only with Macros?
I turned on "OLE2BlockMacros true", but a word file containing a macro virus
was not classified as "INFECTED". I had renamed the file before sending a test
mail.
Any ideas what c
work
ScanOLE2 true
OLE2BlockMacros true
-Original Message-
From: amavis-users
[mailto:amavis-users-bounces+dino.edwards=mydirectmail@amavis.org]
On Behalf Of postmas...@wf-partner.com
Sent: Friday, February 24, 2017 2:08 AM
To: amavis-users@amavis.org
Subject: Re: Quarantine doc Files
: postmas...@wf-partner.com [mailto:postmas...@wf-partner.com]
Sent: Friday, February 24, 2017 11:04 AM
To: Dino Edwards
Cc: amavis-users@amavis.org; amavis-users
Subject: Re: Quarantine doc Files only with Macros?
Both is set. I had to restart service amavis-daemon I think. But now at one of
two
?
-Original Message-
From: postmas...@wf-partner.com [mailto:postmas...@wf-partner.com]
Sent: Friday, February 24, 2017 11:04 AM
To: Dino Edwards
Cc: amavis-users@amavis.org; amavis-users
Subject: Re: Quarantine doc Files only with Macros?
Both is set. I had to restart service amavis
: Dino Edwards
Cc: amavis-users@amavis.org; amavis-users
Subject: Re: Quarantine doc Files only with Macros?
You are right, we have two different linux servers with mailservers and they
are both set in the clamav config files like below but one of them is blocking
outbound OLE2 macro files and
Subject: Re: Quarantine doc Files only with Macros?
You are right, we have two different linux servers with mailservers
and they are both set in the clamav config files like below but one of
them is blocking outbound OLE2 macro files and the other one only
blocks incoming OLE2 marco files?
Services
set
on the servers?
-Original Message-
From: postmas...@wf-partner.com [mailto:postmas...@wf-partner.com]
Sent: Friday, February 24, 2017 11:30 AM
To: Dino Edwards
Cc: amavis-users@amavis.org; amavis-users
Subject: Re: Quarantine doc Files only with Macros?
You are right, we have two
Cc: amavis-users@amavis.org; amavis-users
Subject: Re: Quarantine doc Files only with Macros?
The testmail was cleaned by PC antivirus program. Therefore this strange
behavior. No I tested with another file and mail was blocked every time.
Kind Regards
Thomas
Am 2017-02-25 20:35, schrieb
ssage-
From: postmas...@wf-partner.com [mailto:postmas...@wf-partner.com]
Sent: Monday, February 27, 2017 4:09 AM
To: Dino Edwards
Cc: amavis-users@amavis.org; amavis-users
Subject: Re: Quarantine doc Files only with Macros?
The testmail was cleaned by PC antivirus program. Therefore this
st
11 matches
Mail list logo
