[plug] filtering virus infected files

[Leon Brooks]

Mike Hasleby wrote:
> With the advent of yet another email virus in the guise of the ?love
> bug? last week, am I wrong in suspecting that on our email servers we
> can put in a filter to siphon off message containing a  string of text
> in the subject, and redirect it to /dev/null ? Thus eliminating the
> problem of known viruses before they get to their destination.

It would make more sense to filter out anything with a ".vbs" (case
independent) attachment (".exe" and ".dll" would be other good candied
dates, but may make people sad). If you wanted to be more precise, you
could get only binary/VBS attachments that made reference to email
facilities. This would be messier, since you'd have to uncomress ZIPs,
SFXes and compressed executables before strings-ing them. Since you're
posting from Windows, albeit from Netscape, I understand your fear...
(-:

-- 
Dogs have masters. Cats have staff.