[Gllug] Removing Malicious Attachments with Procmail

[Bruce Richardson]

On Thu, Jun 10, 2004 at 11:15:59AM +0100, Axel wrote:
> Hi all,
> 
> I've heard of a tip using procmail to filter out malicious attachments 
> and am wondering what everyones experience with this is, or whether 
> there is a better/simpler/more efficient way of doing it?

I certainly would not advocate that method for anybody on technical
mailing lists, as you are.  That rule will attack any message that
contains that string, whether it actually forms a content boundary or is
just part of the message (on a technical list where e-mail is discussed,
this is not so unlikely).

The only safe way to do this is to pass the messages through a filter
that parses them properly.

-- 
Bruce

Hierophant: someone who remembers, when you are on the way down,
everything you did to them on the way up.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 261 bytes
Desc: Digital signature
URL: <http://mailman.lug.org.uk/pipermail/gllug/attachments/20040610/a5650bb4/attachment.pgp>
-------------- next part --------------
-- 
Gllug mailing list  -  Gllug at gllug.org.uk
http://lists.gllug.org.uk/mailman/listinfo/gllug