sober.p

Scott Silva ssilva at SGVWATER.COM
Thu May 5 22:01:02 IST 2005


    [ The following text is in the "ISO-8859-1" character set. ]
    [ Your display is set for the "US-ASCII" character set.  ]
    [ Some characters may be displayed incorrectly. ]

Rodney Green wrote:
> Hello,
>
> One of my users has received a message bounce (apparently her e-mail
> address was spoofed) with an .eml attachment that had the sober worm in
> a zip file. I'm thinking it wasn't detected because of the max depth of
> scanning in MS or clamav. What setting do I need to adjust to prevent
> instances such as this?
>
> Thanks,
> Rod

I saw this today also, but didn,t have time to actually look at the .eml
attachment. I'm not sure if blocking by filename.rules would work, or at
least not tick off many people.

--
   ,---.____________      _        ============   .
 /'                  \   |  \       I_  O  _I_,==.:
| A beer doesn't get  >--|===`-----'I `---' I |  |:
| upset if you come  /  _ \         I       I |  |:'
| home with another /  (   `-,----============:__;:
| beer!            /  (_    O   __)       \_      :
| ,,---.__________/     (______)          (_)
:/

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the Wiki (http://wiki.mailscanner.info/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!




More information about the MailScanner mailing list