[Mimedefang] When to do Virus checks

Joseph Brennan brennan at columbia.edu
Thu Nov 30 12:00:34 EST 2006



--On Thursday, November 30, 2006 8:18 -0800 John Rudd <john at rudd.cc> wrote:

> Joseph Brennan wrote:
>>
>> If you reject messages with executable attachments first, let us know
>> whether the virus check catches anything at all.
>>
>
> There have been viruses that were distributed in non-executable zip
> files.  Simple attachment checks probably wont catch those.


Absolutely correct.  You have to be willing to examine zip file contents
or reject zip files.

I like the point about clamav having phish signatures in it.  That is
very worthwhile these days.  I should look into that.

Joseph Brennan
Lead Email Systems Engineer
Columbia University Information Technology




More information about the MIMEDefang mailing list