F-Prot not detecting Mimail?
Paul
zen23003 at ZEN.CO.UK
Fri Aug 29 10:21:51 IST 2003
Seems to me F-Prot isn't detecting Mimail.
I'm using the latest definition files - sign.def and sign2.def dated 29 Aug
and macro.def dated 25 Aug.
However, messages that look like Mimail are getting through. I've even
extracted message.html from message.zip and scanned it manually to no avail.
I suggest f-prot users add the following to filename.rules.conf:
deny message.zip$ Possible Mimail mass mailing worm Possible Mimail
mass mailing worm
Put this just before the line:
allow \.zip$ - -
or it won't work.
More information about the MailScanner
mailing list