SAV detected a violation in a document you authored.

Please contact your system administrator.


The scanned document was QUARANTINED.


Violation Information:
The attachment application.pif contained the virus W32.Sobig.F@mm and could
NOT be repaired.



-
To unsubscribe from this list: send the line "unsubscribe linux-admin" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html

Re: SAV detected a violation in a document you authored.

At 10:33 AM 09/04/2003, admin@interthink.ca wrote:
>Please contact your system administrator.
>
>
>The scanned document was QUARANTINED.
>
>
>Violation Information:
>The attachment application.pif contained the virus W32.Sobig.F@mm and could
>NOT be repaired.

Nice of SAV to hide/remove the headers of the offending email. This
message is pretty much useless.

Free, and much more effective, is John Hardin's Procmail Email Sanitizer rulez.
http://www.impsec.org/email-tools/procmail-security.html

=P


-
To unsubscribe from this list: send the line "unsubscribe linux-admin" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html

Re: SAV detected a violation in a document you authored.

Ryan Flowers said:

> Thanks for this:
> "Free, and much more effective, is John Hardin's Procmail Email
> Sanitizer
> rulez.
> http://www.impsec.org/email-tools/procmail-security.html"
>
> I just installed it, what a neat tool :-)

Glad you enjoy it. I have many networks virus free since before the
LoveBug, thanks to John's Rulez. Report frequently to the ISP of
virus victims, _most_ are good about getting their customers cleaned
up.

--
You too can: "Just say no to OE".
;)

-
To unsubscribe from this list: send the line "unsubscribe linux-admin" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html

Re: SAV detected a violation in a document you authored.

Ryan Flowers said:

Ryan,

Please send your replies and queries to the list so everyone can benefit.

> Well I had been looking for something JUST like this, since sobig.f
> was SO
> bad. Between this, and spamassassin, I should have email pretty
> tight. Any
> tips on installing spamassassin? I've installed it before but couldn't
> get it configured 'just right.'

Spamassassin has a lot of interesting features, but all I can offer is
Read The Fine README File.

and...

in the ~/.procmailrc or /etc/procmailrc file add:
:0fw: spamassassin.lock
* < 256000
| spamassassin

just after the
INCLUDERC=/etc/procmail/local-rules.procmail
INCLUDERC=/etc/procmail/html-trap.procmail
lines

and personally, I like to dump spam into a junk folder that I can
access with IMAP client like SquirrelMail:

:0
*^X-Spam-Flag:.*YES
mail/junk

then just delete the entire file once in a while. ;)

--
Scott

-
To unsubscribe from this list: send the line "unsubscribe linux-admin" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html