[Raw Msg Headers][Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: zmailer subject filtering ? ( ie controlling Melissa virus)
> In light of the recent Melissa email Virus, I was wondering
> how, in zmailer, to emulate the sendmail patch posted at:
>
> ftp://ftp.cert.org/pub/cert_advisories/Patches/CA-99-04-sendmail-melissa-filter.txt
...
> which is a weak kludge, yes (because a similar virus only needs to alter
> the subject line), but it may at least serve to control spread of the
> current macro virus.
>
> Is there a quick kludge for same in zmailer?
Using 'procmail' as local delivery agent with global set
of processing rules.
Alternatively, somebody could complete the contentpolicy()
thing that exists as a hook in the smtpserver. (hint, hint..)
( smtpserver/contentpolicy.c, smtpserver/cfgread.c;
the second one needs a new PARAM thing allowing
setup of the content-policy analysis program.
Consider: Is it enough to just wait() for the child, and
then use exit value as return code, or should some client-
server protocol be enacted in between the smtpserver proper,
and the content policy analyzer ? E.g. replies from the
analyzer tell what the analyzer liked of the message, while
the inputs just tell which spoolfile to analyze ? )
My schedules don't allow any sufficiently quick kludges for
this -- meaning anything completed last week :-(
> Cheers,
> Team Physics Voice : (780) 492-8226 [old AC 403]
> University of Alberta email : Jim.MacKinnon@Phys.UAlberta.CA
> Edmonton, Canada T6G 2N5 WWW : http://www.phys.ualberta.ca/
/Matti Aarnio <mea@nic.funet.fi>