New virus outbreak

Peter Bonivart peter at UCGBOOK.COM
Mon Jan 26 22:17:57 GMT 2004


Jeff Falgout wrote:
> Looks like we are fighting a new outbreak - random
> file names with extensions of .scr, .pif, .exe, .zip, etc
>
> What's the best way to block *ALL* attachments?
>

Putting

deny    .+$     Temporary block         Temporary block

at the top of filename.rules.conf should do the trick (the white space
must be tabs). Totally untested and I might be wrong.

--
/Peter Bonivart

--Unix lovers do it in the Sun

Sun Fire V210, Solaris 9, Sendmail 8.12.10, MailScanner 4.25-14,
SpamAssassin 2.61 + DCC 1.2.21, ClamAV 0.65 + GMP



More information about the MailScanner mailing list