[Mimedefang] any File::Scan scripts?
Tony Nugent
tony at linuxworks.com.au
Fri Oct 18 22:14:01 EDT 2002
This may be slightly off-topic for mimedefang, but I think this list
is an appropriate target audience for this question.
I have created some rudimentary perl scripts using the File::Scan
module, and it seems to do a fairly decent job of identifying
viruses.
But not so good on raw mailbox files. uvscan can identify mime
exploits and some mime-encoded viruses in a raw mbox-style file,
File::Scan doesn't. Using it with mimedefang, I noticed that
uvscan was nicely catching the bugbear's mime exploit before it
knew about bugbear itself. File::Scan would not have caught it
before an update.
I'd like to use File::Scan in two ways: as a command-line tool on my
workstation for quickly scanning files and emails, and to use it in
places where I need to filter mail and clean out mailboxes that have
had deliveries through relays where there has been no filtering.
So I'm looking for a small collection of perl scripts that can do
things like scan files directly or from stdin, scan email after
de-mime'ing them (one or more messages per file), and so on.
A script that would plug into a ~/.procmailrc recipe to work like
the spamassassin/spamc filter would be a gem :)
What I am ultimately looking for is a tool that can handle this:
mailbox-scan.pl /var/spool/mail/user
(or from stdin to stdout) and each message in that mailbox is
checked to identify spam, virus-infected attachments or things like
mime-exploits, and optionally remove (and/or save off) these "dirty"
emails.
That would clean out a mailbox file in one hit, a very useful tool.
Rather than re-invent the wheel (ok, call me lazy:), has anyone done
such a thing already, or know where I might look?
Added bonus if anomy is also available for cleaning up html :)
Google searches proved fruitless for what I'm looking for. (Tho I
did get lots of references back to this list :)
Many thanks.
Cheers
Tony
More information about the MIMEDefang
mailing list