[Mimedefang] MS Office document macros

[Bill Cole]

On 25 Jan 2020, at 6:38, Benny Pedersen via MIMEDefang wrote:

> Kevin A. McGrail skrev den 2020-01-25 00:57:
>
>> I'd suggest you look at SpamAssassin's new OLEVBMacro plugin with
>> 3.4.3.  There's an update to 3.4.4 coming with more blocks too.  
>> KAM.cf
>> has examples for implementation too.
>
> why not add clamav plugin to spamassassin then ? :=)

There was an "enhancement" bug submitted and dismissed as WONTFIX on 
this many years ago in the SA Bugzilla, 
https://bz.apache.org/SpamAssassin/show_bug.cgi?id=2408. A new one was 
recently opened with a first cut on plugin code linked, targeting 
release with v4.0.0: 
https://bz.apache.org/SpamAssassin/show_bug.cgi?id=7786. Feel free to 
review the bugs and raise the topic on spamassassin-users if you 
seriously think that it needs broad discussion.

My personal view is that AV and anything else trying to detect bad 
things inside good mail doesn't belong in SA but there's no real damage 
as long as such things are isolated to plug-ins.

-- 
Bill Cole
bill at scconsult.com or billcole at apache.org
(AKA @grumpybozo and many *@billmail.scconsult.com addresses)
Not For Hire (currently)