subject: (Fwd) RE: Blocking attachments- RE: Virus blocking *.pif
posted: Mon, 12 Apr 2004 10:27:16 +0100


------- Forwarded message follows -------
From: lsi <[email protected]>
To: Marcos Vieyra <[email protected]>
Subject: RE: Blocking attachments- RE: Virus blocking *.pif
Copies to: [email protected]
Send reply to: [email protected]
Date sent: Mon, 12 Apr 2004 00:47:27 +0100

This article outlines open-source solutions:

Dogs of War: Securing Microsoft Groupware Environments with Unix
(Part One) ... http://www.securityfocus.com/infocus/1770

I have written a page for Windows-based users, the opening parts of
which are below.

Stuart

I use layers of filters to keep my inbox relatively clean; I see
around 1 spam/day and 1 virus/month, from around 1000 inbound spams
and 50 inbound viruses a week. Two types of offenders penetrate the
filters; Bayesian-busting spam, and cryptoviruses. The configuration
outlined below will run on a 166MHz Pentium* with Windows 98SE, or
above, and uses two pieces of free, non-Microsoft software: Spampal
(a spam filter), and Pegasus Mail (an email client; Outlook Express
on steroids).

layer ... function
1 ... Bayesian spam filter
2 ... attachment filetype filters
3 ... X-RBL-Warning filter
4 ... personalised subjectline filters
5 ... blacklisted arbitrary keyword filters
6 ... whitelisted personal address filters
7 ... whitelisted family, friend and mailing list filters
8 ... blacklisted personal address filters
filter types and ordering

The ordering of these filters is very important...

Continues here: email filtering

Stuart

On 7 Apr 2004 at 11:56, Marcos Vieyra wrote:

> On Tue, 2004-04-06 at 18:43, Nick FitzGerald wrote:
>
> If you want to block "Windows executables" or "Microsoft Word"
> > documents (and all the relatives) put a proper content inspection
> > filter in place that does proper format typing of attachments

> Does anyone have a recommendation for a free, open source product that
> would fit this bill?
>
> I currently use postfix on linux, so ideally the solution would place
> nice with my existing setup :).
>
> I've looked at amavisd with clamav, but i'm not 100% positive that it
> does what Nick describes above. If so, great!


------- End of forwarded message -------

---
* Origin: [adminz] tech, security, support (192.168.0.2)

generated by msg2page 0.06 on Jul 21, 2006 at 19:04:16

 search: