New virus outbreak

Peter Bonivart peter at UCGBOOK.COM
Mon Jan 26 22:17:57 GMT 2004

Jeff Falgout wrote:
> Looks like we are fighting a new outbreak - random
> file names with extensions of .scr, .pif, .exe, .zip, etc
> What's the best way to block *ALL* attachments?


deny    .+$     Temporary block         Temporary block

at the top of filename.rules.conf should do the trick (the white space
must be tabs). Totally untested and I might be wrong.

/Peter Bonivart

--Unix lovers do it in the Sun

Sun Fire V210, Solaris 9, Sendmail 8.12.10, MailScanner 4.25-14,
SpamAssassin 2.61 + DCC 1.2.21, ClamAV 0.65 + GMP

More information about the MailScanner mailing list