Re: new worm going around - results

[Gary <gary-list-silug@mygirlfriday.info>]

On Wed, Jan 21, 2004 at 07:00:43PM -0600 or thereabouts, Steven Pritchard wrote:
 
> Oh, and FWIW, I finally have the rules right in majordomo2 to reject
> any Windows executable, so there shouldn't be anything getting through
> the lists.  Next month, I'll have a virus scanner in front of all our
> mail (if all goes well), so not even the zipped things will get
> through then...

Don't know if you can regex on the first line of MIME attachments in
Sendmail or Postfix, but if you can this will block zip files.

# .ZIPfile signature seen in SoBig.E:
UEsDBBQAA
 

-- 
Gary

-
To unsubscribe, send email to majordomo@silug.org with
"unsubscribe silug-discuss" in the body.