Skip to Content.
Sympa Menu

internetworkers - Re: [internetworkers] Anti-Virus and IMAP

internetworkers AT lists.ibiblio.org

Subject: Internetworkers: http://www.ibiblio.org/internetworkers/

List archive

Chronological Thread  
  • From: John Broome <jbroome AT gmail.com>
  • To: "Internetworkers: http://www.ibiblio.org/internetworkers/" <internetworkers AT lists.ibiblio.org>
  • Subject: Re: [internetworkers] Anti-Virus and IMAP
  • Date: Mon, 20 Feb 2006 21:14:19 -0500

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Carol Thomson wrote:
> John Broome wrote:
>
>> On 2/20/06, Carol Thomson <cthomson AT topsailtech.com> wrote:
>>
>>> To follow-up the virus discussion... Can anyone explain how
>>> anti-virus apps (Symantec, McAfee, BitDefender, etc) do or do not
>>> scan IMAP email. I realize that IMAP keeps the messages on the
>>> server and only headers are downloaded. But what about
>>> attachments and saving a message to a local folder? Do those
>>> files only get scanned when you do a system scan or do they get
>>> scanned when saved? Symantec and the others only claim to scan
>>> POP email - do they mean real-time only?
>>
>>
>> I have procmail set up to scan incoming messages before they get
>> delivered to the INBOX, same thing with spamassassin.
>>
>> # Calls the clamAV scanner
>> :0fw
>> | /usr/local/scripts/clamfilter.pl
>>
>> # If a virus is found, move it to a specific folder.
>> :0:
>> * ^X-Virus-Found: yes
>> .Viruses/
>> ---
>
> You are doing this on the server, right? SpamAssasin is run on my
> server, but that is all. I want to catch viruses on that main
> Windows machien I use to access this email account. So again, to
> what degree does Symantec, McAfee, BitDefender anti-virus scan
> messages and attachments with IMAP (using Thunderbird but I don't
> think that matters)?

Yup, all of that is done on my server before i get a chance to open it,
so no matter what client i'm using i don't have to worry about uglies.

I also have this rule that i found on the web:

# Redirect windows executables (note - haven't included exe
:0 B
*
name=.*\.(vbs\"|wsf\"|vbe\"|wsh\"|hta\"|scr\"|pif\"|shs\"|bat\"|bas\"|scr\"|dll\"|zip\"|rar\"|com\")
{
:0
.Viruses/

I don't really get that many legitimate files with those extensions, so
i squirrel them away out of my inbox.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (Darwin)

iD8DBQFD+nd7lH10NsAbJ7ERAm6/AJwPTk7kZuDVFWFMNL+AdEz0U9/e1ACfW12b
jgrWqdqp5WvS0ZRqpjRIEB4=
=HN96
-----END PGP SIGNATURE-----




Archive powered by MHonArc 2.6.24.

Top of Page