Re: AntiVirus for sendmail

["Arvid Grøtting" <arvidg@netfonds.no>]

Lars Hansson <lars@unet.net.ph> writes:

> There have been numerous exploits for both Netscape Mail and Eudora.

Yes.  Still, outlook-dependent viruses seem to be more frequent at the
moment.

But as an interesting trend lately, most of the viruses common today
use the Microsoft EXE file format.  If you don't have a legitimate
business need for exchanging such files, scanning for EXE files[1]
will stop many[2] viruses and can be done quite trivially[3][4].


[1] by any name, of course
[2] not all!
[3] the scanning itself, that is.  The bookkeeping required to
interface with Internet mail is another matter entirely.
[4] assuming, of course, that the scanning is only emplyed in
environments (e.g. Internet mail) where EXE files[1] can be considered
illegitimate by default.
-- 
/*  trivirus.c -- very trivial virus scanner  */
#include <stdio.h> /* (c) Arvid Grøtting 2002 */
int main (int argc, char **argv, char **environ)
{return (getchar() == 'M' && getchar() == 'Z');}