Virus Parser

Steve Basford steveb_clamav at sanesecurity.com
Mon Feb 8 20:49:17 UTC 2016


On Mon, February 8, 2016 7:32 pm, Peter Lemieux wrote:


>
> ScanOLE2 yes
> OLE2BlockMacros yes
>
>
> then files with macros will be treated as malware.  The macros will not
> be stripped though.  The message will be quarantined by MailScanner like
> any other piece of malware.  In the organization I consult to, ordinary
> users have no need of files with macros, so blocking them all is the
> easiest solution.

Agreed the above option changes do work... but a lot of my users at work
, do have a lot of macros embedded in various price lists etc, which got
blocked by these options... hence badmacro.ndb was born :)

Cheers,

Steve
Web : sanesecurity.com
Blog: sanesecurity.blogspot.com
Twitter: @sanesecurity



More information about the MailScanner mailing list