Subject: Re: recommendations for virus/worm scanning software?
To: Michael Wolfson <michael@nosflow.com>
From: Perry E. Metzger <perry@piermont.com>
List: tech-pkg
Date: 09/20/2003 18:20:29
Michael Wolfson <michael@nosflow.com> writes:
> I've been slammed with a ton of worms the past two days.  What do
> y'all recommend I use from pkgsrc to block them (using postfix)?

you don't need anything from pkgsrc to block them. Postfix 2.0 and
later have excellent scanning abilities built in.

Just add:

/^Content-(Type|Disposition):.*(file)?name=.*\.(asd|bat|chm|cmd|com|dll|exe|hlp|hta|js|jse|lnk|ocx|pif|scr|shb|shm|shs|vb|vbe|vbs|vbx|vxd|wsf|wsh)/     REJECT Sorry, we do not accept .${3} file types.

to your header_checks file (and turn on header checks!) and you'll
never see any Microsoft viruses ever again.

-- 
Perry E. Metzger		perry@piermont.com