[28588] in North American Network Operators' Group
Re: Anybody patching Sendmail to filter _attachments_?
daemon@ATHENA.MIT.EDU (Alberto Begliomini)
Tue May 9 02:54:49 2000
Message-ID: <3917B55A.EDA0071B@coldstone.com>
Date: Mon, 08 May 2000 23:51:06 -0700
From: Alberto Begliomini <aub@coldstone.com>
MIME-Version: 1.0
To: Bill Woodcock <woody@zocalo.net>
Cc: nanog@nanog.org
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Errors-To: owner-nanog-outgoing@merit.edu
Look at http://www.decros.cz/~reho/check_virus. This is patch, written
by Petr Rehor, that allows to invoke a antivirus software from inside
Sendmail . It is a great solution and I have been using it for several
months with several of my customers. Suffice to say, those of my
customers which run Sendmail with Petr's patch have experienced very
little impact during the recent virus attack. The only thing that the
patch doesn't do is to handle MIME attachements, and therefore I wrote
a wrapper (ftp.coldstone.com), that is less than suboptimal (but works),
to extract the attachement first then feed it to one or more antivirus
software (e.g. McAfee, TrenMicro, etc.)
-Alberto
--
Alberto U. Begliomini Email: aub@coldstone.com
Coldstone Consulting, LLC Phone: 650-400-3990
Security, Data Centers Design and Management Fax: 650-654-5938
Bill Woodcock wrote:
>
> ...as opposed to just by subject line? We're getting a lot of requests
> from customers that we MX for to just throw away either all attachments or
> any .vbs visual basic attachments. Obviously the Sendmail-Inc.-approved
> fix is subject-line based, which doesn't take care of that.
>
> Anybody else working on this already?
>
> -Bill
