[LUGOS] Antivirus programi

[Boris Sagadin]

Amavisd ima opcijo, s katero dolocis za katere viruse naj ne
poslje obvestila. Bo potem potrebno rocno dodajat nove viruse...

# Treat envelope sender address as unreliable and don't send sender
# notification / bounces if name(s) of detected virus(es) match the list.
# Note that virus names are supplied by external virus scanner(s) and are
# not standardized, so virus names may need to be adjusted.
# See README.lookups for syntax, check also README.policy-on-notifications
#
$viruses_that_fake_sender_re = new_RE(
  qr'nimda|hybris|klez|bugbear|yaha|braid|sobig|fizzer|palyh|peido|holar'i,
  qr'tanatos|lentin|bridex|mimail|trojan\.dropper|dumaru|parite|spaces'i,
  qr'dloader|galil|gibe|swen|netwatch|bics|sbrowse|sober|rox|val(hal)?la'i,
  qr'frethem|sircam|be?agle|tanx|mydoom|novarg|shimg|netsky|somefool|moodown'i,
  qr'@mm|@MM',    # mass mailing viruses as labeled by f-prot and uvscan
  qr'Worm'i,      # worms as labeled by ClamAV, Kaspersky, etc
  [qr'^(EICAR|Joke\.|Junk\.)'i         => 0],
  [qr'^(WM97|OF97|W95/CIH-|JS/Fort)'i  => 0],
  [qr/.*/ => 1],  # true by default  (remove or comment-out if undesired)
);

Thursday, April 1, 2004, 11:26:35 AM, you wrote:

> Na žalost to pri vseh strankah ne drži in si ne morem privoščit, da bi vsem
> izklopil obveščanje.

> Lp
> Marko


> -----Original Message-----
> From: simon [mailto:simon.golicnik at energetika-lj.si]
> Sent: Tuesday, March 30, 2004 2:09 PM
> To: lugos-list at lugos.si
> Subject: Re: [LUGOS] Antivirus programi


>>
>> Katere antivirus programe uporabljate za Linux mailerje?

> MailScanner + sophos (sophossavi)

>> Problem pri novih virusih je, da so e-naslovi vedno spoof-ani in potem
>> dobivajo obvestila o virusih tudi tisti, ki se jih to ne tiče. Je že
> kakšna
>> pametna rešitev.

> Izklopi obvescanje prejemnika in posiljatelja, vecinoma je tako ali tako
> brez haska. Tisti ki fasejo virus to kaj kmalu ugotovijo.

> LP SImon



-- 
lp,
 Boris Sagadin      boris at intera.si