Vulnerability Development mailing list archives
Re: Sendmail vs *.vbs
From: sean () ESCAPE CA (Sean A. Walberg)
Date: Mon, 8 May 2000 08:16:16 -0500
Check the thread in comp.mail.sendmail called "sendmail 8.9.3 blocking attachments". It passes all mail through procmail regardless of destination. Sean On Sun, 7 May 2000, Todd Garrison wrote:
I was really bummed when I saw how they did it... I want to be able to block all *attachments* that have the string .vbs in the name - I don't want to rely on subject headers alone, but I haven't quite figured out how yet. I played with my .mc/.cf configs in sendmail for about six hours trying to get it to play nice, but the problem seems to be that all the different mailers describe their attachments differently. I must be pretty thick in the head, but the fact that I know others want to do the same thing and I have yet to see a filter that does it (in sendmail that is) bums me out. I could just use procmail, but that only seems to work for local delivery and is not any good for a relay server (for example - reducing the risks of running MS-Exchange as the front-line mail exchanger on the internet by relaying through sendmail). Maybe I am wrong on this though - can procmail be configured to process mail that isn't delivered locally? Any sendmail gurus out there that can help enlighten us lesser beings? Thanks, ToddSendmail.com has released a procedure to block the Love letter virus that's been nailing a lot of people today. This works for the Unix and NT versions of Sendmail. http://www2.sendmail.com/loveletter/
------------------------------------------------------------------- Sean Walberg <sean () escape ca> http://www.escape.ca/~sean "Fore yeers ago I kudn't spel Engineer. Now I are won."
Current thread:
- Sendmail vs *.vbs Todd Garrison (May 07)
- Re: Sendmail vs *.vbs Mariusz Woloszyn (May 08)
- WSCRIPT.EXE , CSCRIPT.EXE replacement for *.vbs Richard Rager (May 11)
- Re: WSCRIPT.EXE , CSCRIPT.EXE replacement for *.vbs Blue Boar (May 11)
- Re: WSCRIPT.EXE , CSCRIPT.EXE replacement for *.vbs Daniel S. Otis-Vigil (May 11)
- Re: WSCRIPT.EXE , CSCRIPT.EXE replacement for *.vbs Richard Rager (May 12)
- WSCRIPT.EXE , CSCRIPT.EXE replacement for *.vbs Richard Rager (May 11)
- Re: Sendmail vs *.vbs Mariusz Woloszyn (May 08)
- Re: Sendmail vs *.vbs Sean A. Walberg (May 08)
- Re: Sendmail vs *.vbs Gert-Jan Hagenaars (May 08)
- Re: Sendmail vs *.vbs Sean A. Walberg (May 08)
- <Possible follow-ups>
- Re: Sendmail vs *.vbs Mark Tinberg (May 08)
- Re: Sendmail vs *.vbs Mariusz Woloszyn (May 08)