Virus Parser

[Moris Kod]

So I'll need to run CLAMD to access this feature?   I'm compiling clamav .99 on the system now.
Also I'm looking at those .ndb files!
      From: Steve Basford <steveb_clamav at sanesecurity.com>
 To: MailScanner Discussion <mailscanner at lists.mailscanner.info> 
 Sent: Monday, February 8, 2016 2:49 PM
 Subject: Re: Virus Parser
 
On Mon, February 8, 2016 7:32 pm, Peter Lemieux wrote:


>
> ScanOLE2 yes
> OLE2BlockMacros yes
>
>
> then files with macros will be treated as malware.  The macros will not
> be stripped though.  The message will be quarantined by MailScanner like
> any other piece of malware.  In the organization I consult to, ordinary
> users have no need of files with macros, so blocking them all is the
> easiest solution.

Agreed the above option changes do work... but a lot of my users at work
, do have a lot of macros embedded in various price lists etc, which got
blocked by these options... hence badmacro.ndb was born :)

Cheers,

Steve
Web : sanesecurity.com
Blog: sanesecurity.blogspot.com
Twitter: @sanesecurity



-- 
MailScanner mailing list
mailscanner at lists.mailscanner.info
http://lists.mailscanner.info/listinfo/mailscanner



  
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20160209/38ae7f34/attachment.html>