Tugger the SLUGger!SLUG Mailing List Archives

Re: [SLUG] Mid-DATA spam/AV detection considered harmful [Was: Virus scanningbounce strategy]


<quote who="lists@xxxxxxxxxx">

> do you have checks that detect mydoom in ZIPs ? I've put the checks that
> were on the Postfix list, but, I'm still getting a lot of 30k zips
> through.

Are you using this one (body check)?

  /^UEsDBAoAAAAAA/   DISCARD W32.MyDoom.A

- Jeff

-- 
GVADEC 2004: Kristiansand, Norway                    http://2004.guadec.org/
 
       The implementation of any sufficiently advanced technology is
                        indistinguishable from pr0n.