Re: Catching Windows executables as attachments

[ro...@elastica.com]

As I'm on a mac there's a lot of file types I don't care about so I just have
perl scripts that go thru the mail using MIME::Entity etc and remove them.

I based my code of some code Randall Schwartz wrote once to remove the annoying
WINMAIL.DAT attachments etc.

Quoting Rob Blomquist <ro...@verizon.net>:

> I have currently tuned my SARE spam filters, and am humming right along, I
> get 
> one or 2 uncaught spams a day which is no big deal. But I would like to catch
> 
> the virus emails that have Win exe, scr, bat, and the like for attachments, 
> but I can't find a rule for them. 
> 
> Is there one? How can I catch them otherwise?
> 
> Rob
> -- 
> 
> Linux Desktop user since 2000,
> Home networker since shortly after.
> 
> Linux User #183693
> http://counter.li.org/
> 




----------------------------------------------------------------
This message was sent using IMP, the Internet Messaging Program.

Re: Catching Windows executables as attachments

[jdow <jd...@earthlink.net>]

Rob, I use procmail here and use a procmail recipe to tag the EXE
such files. It's easier there than in SpamAssassin. I use the
"nkvir" scripts to some good effect.

(Of course, Earthlink recently got "angry" with all the Sober nonsense
and turned on everybody's SpamBlocker. My first reaction was annoyance.
Then I decided to let it keep filtering them and simply take the
results and mark THAT as spam. (One very easy test.) I still get my
running statistics; and, I get another serious level of protection. I
wish all ISPs would do something like this on general principles.)

{^_^}
----- Original Message ----- 
From: <ro...@elastica.com>


> As I'm on a mac there's a lot of file types I don't care about so I just
have
> perl scripts that go thru the mail using MIME::Entity etc and remove them.
>
> I based my code of some code Randall Schwartz wrote once to remove the
annoying
> WINMAIL.DAT attachments etc.
>
> Quoting Rob Blomquist <ro...@verizon.net>:
>
> > I have currently tuned my SARE spam filters, and am humming right along,
I
> > get
> > one or 2 uncaught spams a day which is no big deal. But I would like to
catch
> >
> > the virus emails that have Win exe, scr, bat, and the like for
attachments,
> > but I can't find a rule for them.
> >
> > Is there one? How can I catch them otherwise?
> >
> > Rob
> > -- 
> >
> > Linux Desktop user since 2000,
> > Home networker since shortly after.
> >
> > Linux User #183693
> > http://counter.li.org/