F-Prot not detecting Mimail?

Paul zen23003 at ZEN.CO.UK
Fri Aug 29 10:21:51 IST 2003


Seems to me F-Prot isn't detecting Mimail.

I'm using the latest definition files - sign.def and sign2.def dated 29 Aug
and macro.def dated 25 Aug.

However, messages that look like Mimail are getting through.  I've even
extracted message.html from message.zip and scanned it manually to no avail.

I suggest f-prot users add the following to filename.rules.conf:

deny    message.zip$    Possible Mimail mass mailing worm    Possible Mimail
mass mailing worm

Put this just before the line:

allow   \.zip$                  -       -

or it won't work.



More information about the MailScanner mailing list