Tom I've always used Winnow for rules with CA, does winnow still have a place, in the new ASSP?
On Mar 12, 2009, at 6:48 PM, Tom Shaw wrote:
At 10:27 AM +1100 3/13/09, Nicholas Orr wrote:On 13/03/2009, at 7:02 AM, Tom Shaw wrote:I love ASSP and that with ClamAV has been GREAT.This is one thing I don't get : What are people scanning for virus in? There is an option in ASSP to block attachments, so you're automatically blocking all of the various executable file types. What sorts of files are left that need to be virus scanned?Nick,Well, I have ClamAV check pdf's (new viruses there), jpegs (old viruses there), and all compressed files, as well as attachments that are not the usual subjects and shell scripting attacks,and unix executables.Additionally, I have clamav setup for phish detection and also use winnow on steroids to identify numerous malware, phish and spam emails via clamav.Tom -- Tom Shaw - Chief Engineer, OITC <tshaw at oitc.com>, http://www.oitc.com/ local wx: http://www.oitc.com/weatherUS Phone Numbers: 321-984-3714, 321-729-6258(fax), 321-258-2475(cell/ voice mail,pager)Text Paging: http://www.oitc.com/Pager/sendmessage.html AIM/iChat: trshaw@xxxxxxx Fish more and Live longer Circle The Wagons manage: //www.freelists.org/list/ctw post: mailto:ctw@xxxxxxxxxxxxx unsubscribe: mailto:ctw-request@xxxxxxxxxxxxx?subject=unsubscribe search: //www.freelists.org/archives/ctw faq: //www.freelists.org/wiki/the_faq
Circle The Wagonsmanage: //www.freelists.org/list/ctw post: mailto:ctw@xxxxxxxxxxxxx
unsubscribe: mailto:ctw-request@xxxxxxxxxxxxx?subject=unsubscribe search: //www.freelists.org/archives/ctw faq: //www.freelists.org/wiki/the_faq