Re: [SLUG] procmail

From: Doug Koobs (dkoobs@dkoobs.com)
Date: Mon May 09 2005 - 16:34:04 EDT


patrick grantham said:
> I need to use procmail to filter emails with an (_info.zip, think Sobor.0
> virus.) A client of mine is getting clobbered with them. Rather than rely
> on the antivirus app to screen it, I want to use procmail to send the email
> to "bit bucket" Where is the best place to get started with procmail?
>

If your looking for a book on Procmail:
http://www.amazon.co.uk/exec/obidos/ASIN/0201737906/ref=ase_webprogramminboo/026-8972717-8050000

It's been a long time since I've messed with Procmail, so I'm not really in the
position to give tips. But that book was very helpful when I was learning/using it.

However, it may be that Procmail isn't the best way to handle this situation. Every
new virus is going to have a different attachment name, and you'll have to go in and
adjust for it. If you can, use something like amavisd-new or Mailscanner with ClamAV
and/or BitDefender. All free as in beer, but BitDefender isn't OpenSource.

HTH

Doug

--

----------------------------------------------------------------------- This list is provided as an unmoderated internet service by Networked Knowledge Systems (NKS). Views and opinions expressed in messages posted are those of the author and do not necessarily reflect the official policy or position of NKS or any of its employees.



This archive was generated by hypermail 2.1.3 : Fri Aug 01 2014 - 18:49:04 EDT