Re: [LUG] viruses

[Simon Waters <Simon@xxxxxxxxxxxxxxxxxxxx>]

Neil Williams wrote:
> Be grateful, some are getting >20 a day.

Some are getting >40 a day :(

And this isn't uncommon.

I'm probably getting far more at work but it is less easy to count when
you don't have effective countermeasures.

> Just delete them

Kill them at MTA level I say.

Postfix 2 does it with 2 lines;

$ cat /etc/postfix/mime_header_checks.regexp
/filename=\"?(.*)\.(bat|chm|cmd|com|do|exe|hta|jse|rm|scr|pif|vbe|vbs|vxd|xl)\"?$/
  REJECT For security reasons we reject attachments of this type
/^\s*Content-(Disposition|Type).*name\s*=\s*"?(.+\.(lnk|asd|hlp|ocx|reg|bat|c[ho]m|cmd|exe|dll|vxd|pif|scr|hta|jse?|sh[mbs]|vb[esx]|ws[fh]|wav|mov|wmf|xl))"?\s*$/
  REJECT Attachment type not allowed. File "$2" has the unacceptable
extension "$3"

I believe Exim may be able to as well.

Postfix doesn't discriminate - it stops you sending them as well.

Attachment: signature.asc
Description: OpenPGP digital signature