[Mimedefang] When to do Virus checks
Joseph Brennan
brennan at columbia.edu
Thu Nov 30 12:00:34 EST 2006
--On Thursday, November 30, 2006 8:18 -0800 John Rudd <john at rudd.cc> wrote:
> Joseph Brennan wrote:
>>
>> If you reject messages with executable attachments first, let us know
>> whether the virus check catches anything at all.
>>
>
> There have been viruses that were distributed in non-executable zip
> files. Simple attachment checks probably wont catch those.
Absolutely correct. You have to be willing to examine zip file contents
or reject zip files.
I like the point about clamav having phish signatures in it. That is
very worthwhile these days. I should look into that.
Joseph Brennan
Lead Email Systems Engineer
Columbia University Information Technology
More information about the MIMEDefang
mailing list