Zip files not getting checked?

Mike Kercher mike at CAMAROSS.NET
Sat Aug 2 17:18:28 IST 2003


Gotcha.  I just installed your script on one of my mail servers to see how
it does.  I too had MiMail slip through yesterday before I got the
notification from Sophos.  Luckily, (if I read the advisory correctly)
MiMail exploits a vulnerability in Windows which M$ has a patch for.  I keep
all of my Windows boxes updated as much as I can.

Mike


-----Original Message-----
From: MailScanner mailing list [mailto:MAILSCANNER at JISCMAIL.AC.UK] On Behalf
Of Steve Thomas
Sent: Saturday, August 02, 2003 12:58 AM
To: MAILSCANNER at JISCMAIL.AC.UK
Subject: Re: Zip files not getting checked?


On Sat, Aug 02, 2003 at 12:42:12AM -0500, Mike Kercher is rumored to have
said:
>
> What does your script do differently than the update_virus_scanners 
> script?
>

I wrote that long before I was using MS, or I probably wouldn't have
bothered. I don't use the update_virus_scanners script, so I'm not sure
*exactly* what it does, but my understanding is that it runs (via cron?)
periodically, and pulls down the entire zip file of IDEs. My script pulls
just the single IDE as soon as the notification e-mail comes in. No wasted
hits against the Sophos server, no wasted bandwidth (not like it's a lot)
and no letting viruses through while you're asleep and the
update_virus_scanners script is waiting for it's next run. Today was a good
example - one copy of the virus got through before the new IDE was in place
and two more were caught within minutes after it was installed.

--
"I've just learned about his illness. Let's hope it's nothing trivial."
- Irvin S. Cobb




More information about the MailScanner mailing list