Re: Anybody patching Sendmail to filter _attachments_?

[Alberto Begliomini <aub () coldstone com>]

Look at http://www.decros.cz/~reho/check_virus. This is patch, written
by Petr Rehor, that allows to invoke a antivirus software from inside 
Sendmail . It is a great solution and I have been using it for several 
months with several of my customers. Suffice to say, those of my 
customers which run Sendmail with Petr's patch have experienced very
little impact during the recent virus attack. The only thing that the
patch doesn't do is to handle MIME attachements, and therefore I wrote
a wrapper (ftp.coldstone.com), that is less than suboptimal (but works), 
to extract the attachement first then feed it to one or more antivirus 
software (e.g. McAfee, TrenMicro, etc.)

-Alberto

-- 
Alberto U. Begliomini                            Email: aub () coldstone com
Coldstone Consulting, LLC                        Phone: 650-400-3990
Security, Data Centers Design and Management     Fax:   650-654-5938



Bill Woodcock wrote:
> ...as opposed to just by subject line?  We're getting a lot of requests
> from customers that we MX for to just throw away either all attachments or
> any .vbs visual basic attachments.  Obviously the Sendmail-Inc.-approved
> fix is subject-line based, which doesn't take care of that.
>
> Anybody else working on this already?
>
>                                 -Bill