Re: Virus Emails - Mailing list pgsql-hackers

From Christopher Kings-Lynne
Subject Re: Virus Emails
Date
Msg-id GNELIHDDFBOCMGBFGEFOGEGMCDAA.chriskl@familyhealth.com.au
Whole thread Raw
In response to Re: Virus Emails  ("Marc G. Fournier" <scrappy@hub.org>)
Responses Re: Virus Emails  (Dave Cramer <dave@fastcrypt.com>)
List pgsql-hackers
Hmmm - I'm pretty sure that uvscan won't automatically extract out MIME
attachements.  You need to scan normal files.

We use inflex on our mail servers to extract all our emails before
scanning...

Chris

> -----Original Message-----
> From: Marc G. Fournier [mailto:scrappy@hub.org]
> Sent: Tuesday, 30 July 2002 10:47 PM
> To: Larry Rosenman
> Cc: Christopher Kings-Lynne; pgsql-hackers@postgresql.org
> Subject: Re: [HACKERS] Virus Emails
>
>
>
>
> Okay, am playing with this on one of my 'none-critical' servers right now
> ... tried to use uvscan from teh command line, and it didn't appear to
> pick up any of the Klez stuff, even though I know I have a few in my
> mailbox ...
>
> What options should I be running as?  I'm using the following:
>
> uvscan --analyse --recursive --mime --summary --program /var/spool/mail
>
> On 28 Jul 2002, Larry Rosenman wrote:
>
> > On Sun, 2002-07-28 at 20:10, Marc G. Fournier wrote:
> > >
> > > God, I go through 200+ of those almost daily as moderator ...
> imagine if
> > > we had the lists open? :)
> > I picked up a copy of McAfee's vscan for FreeBSD from one of my contract
> > people, and have amavisd-milter running to prevent them from even
> > getting in the door.
> >
> > Mayhaps pgsql.org should do the same?
> >
> >
> > >
> > >
> > > On Sat, 27 Jul 2002, Christopher Kings-Lynne wrote:
> > >
> > > > Hi guys,
> > > >
> > > > I seem to be getting virus emails that pretend to be one of
> your guys.  eg.
> > > > I get them from T.Ishii and N.Conway, etc.  Anyone out
> there on the list who
> > > > should perhaps scan their computer? :)
> > > >
> > > > Chris
> > > >
> > > >
> > > >
> > > > ---------------------------(end of
> broadcast)---------------------------
> > > > TIP 5: Have you checked our extensive FAQ?
> > > >
> > > > http://www.postgresql.org/users-lounge/docs/faq.html
> > > >
> > >
> > >
> > > ---------------------------(end of
> broadcast)---------------------------
> > > TIP 3: if posting/reading through Usenet, please send an appropriate
> > > subscribe-nomail command to majordomo@postgresql.org so that your
> > > message can get through to the mailing list cleanly
> > >
> > --
> > Larry Rosenman                     http://www.lerctr.org/~ler
> > Phone: +1 972-414-9812                 E-Mail: ler@lerctr.org
> > US Mail: 1905 Steamboat Springs Drive, Garland, TX 75044-6749
> >
> >
>



pgsql-hackers by date:

Previous
From: nconway@klamath.dyndns.org (Neil Conway)
Date:
Subject: Re: getpid() function
Next
From: "Christopher Kings-Lynne"
Date:
Subject: Re: Virus Emails