[Mimedefang] any File::Scan scripts?

Tony Nugent tony at linuxworks.com.au
Fri Oct 18 22:14:01 EDT 2002


This may be slightly off-topic for mimedefang, but I think this list
is an appropriate target audience for this question.

I have created some rudimentary perl scripts using the File::Scan
module, and it seems to do a fairly decent job of identifying
viruses.

   But not so good on raw mailbox files.  uvscan can identify mime
   exploits and some mime-encoded viruses in a raw mbox-style file,
   File::Scan doesn't.  Using it with mimedefang, I noticed that
   uvscan was nicely catching the bugbear's mime exploit before it
   knew about bugbear itself.  File::Scan would not have caught it
   before an update.

I'd like to use File::Scan in two ways: as a command-line tool on my
workstation for quickly scanning files and emails, and to use it in
places where I need to filter mail and clean out mailboxes that have
had deliveries through relays where there has been no filtering.

So I'm looking for a small collection of perl scripts that can do
things like scan files directly or from stdin, scan email after
de-mime'ing them (one or more messages per file), and so on.

A script that would plug into a ~/.procmailrc recipe to work like
the spamassassin/spamc filter would be a gem :)

What I am ultimately looking for is a tool that can handle this:

  mailbox-scan.pl /var/spool/mail/user

(or from stdin to stdout) and each message in that mailbox is
checked to identify spam, virus-infected attachments or things like
mime-exploits, and optionally remove (and/or save off) these "dirty"
emails.

That would clean out a mailbox file in one hit, a very useful tool.

Rather than re-invent the wheel (ok, call me lazy:), has anyone done
such a thing already, or know where I might look?

Added bonus if anomy is also available for cleaning up html :)

Google searches proved fruitless for what I'm looking for.  (Tho I
did get lots of references back to this list :)

Many thanks.

Cheers
Tony



More information about the MIMEDefang mailing list