Virus Parser

[Moris Kod]

I got this working today!   I compiled the latest clam and got the clamdrunning on my box.  I had to tweak some mailscanner stuff and got the sanesecurity dbs downloading.    So far I have not found a bad macro doc or xls that the badmacro.ndb doesn't pickup on.  

      From: Steve Basford <steveb_clamav at sanesecurity.com>
 To: MailScanner Discussion <mailscanner at lists.mailscanner.info> 
 Sent: Monday, February 8, 2016 2:49 PM
 Subject: Re: Virus Parser
   

On Mon, February 8, 2016 7:32 pm, Peter Lemieux wrote:


>
> ScanOLE2 yes
> OLE2BlockMacros yes
>
>
> then files with macros will be treated as malware.  The macros will not
> be stripped though.  The message will be quarantined by MailScanner like
> any other piece of malware.  In the organization I consult to, ordinary
> users have no need of files with macros, so blocking them all is the
> easiest solution.

Agreed the above option changes do work... but a lot of my users at work
, do have a lot of macros embedded in various price lists etc, which got
blocked by these options... hence badmacro.ndb was born :)

Cheers,

Steve
Web : sanesecurity.com
Blog: sanesecurity.blogspot.com
Twitter: @sanesecurity



-- 
MailScanner mailing list
mailscanner at lists.mailscanner.info
http://lists.mailscanner.info/listinfo/mailscanner



  
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20160210/21a14cd0/attachment.html>