D&C Lug - Home Page
Devon & Cornwall Linux Users' Group

[ Date Index ][ Thread Index ]
[ <= Previous by date / thread ] [ Next by date / thread => ]

Re: Malicious emails was Re: [LUG] OT: spam



-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Adrian Midgley wrote:
> It seems reasonable to assume that on Sunday 21 September 2003 17:43,
> Mark Evans wrote:
>
>> Unfortunatly squid does not allow ACL's by user_agent or similar.
>
>
> How does this Open Source development method work again?

Like most software development it works best if you spend a lot of time
upfront making sure you aren't reinventing the wheel, and making sure
what you do is appropriate ;)

> Seriously, how hard can that be?

Writing it? Persuading the Squid maintainers to include it in the core
so you don't have to reapply the patch with each release? Or maintaining
the increased complexity in the Squid code base from now till Squid
falls out of favour?

Personally I think it sounds like a problem best solved ELSEWHERE,
usually Windows servers provide login scripts for this sort of thing.

Probably the bigger problem would be browsers pretending to be IE, than
users making IE pretend to be something else. Opera users might get
hacked of with the perpetual visits to Windows Update.

Should be easy to make key Intranet pages redirect out of date copies of
IE to Windows update, is that good enough?

 Simon

Ralph excellent anti windows executable filter, must be tip of the month ;-)

$ more /etc/postfix/mime_header_checks.regexp
/filename=\"?(.*)\.(bat|chm|cmd|com|do|exe|hta|jse|rm|scr|pif|vbe|vbs|vxd|xl)\"?$/
   REJECT For security reasons we reject attachments of this type
/^\s*Content-(Disposition|Type).*name\s*=\s*"?(.+\.(lnk|asd|hlp|ocx|reg|bat|c[ho]m|cmd|exe|dll|vxd|pif|scr|hta|jse?|sh[mbs]|vb[esx]|ws[fh]|wav|mov|wmf|xl))"?\s*$/
   REJECT Attachment type not allowed. File "$2" has the unacceptable
extension "$3"
-----BEGIN PGP SIGNATURE-----
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQE/blqwGFXfHI9FVgYRAvjsAKC/VswVBDI+FA/Ut/ZNnMV0APgbLQCfQxwJ
VFCoxDgoU/w318vTCWeY21Q=
=ZAUy
-----END PGP SIGNATURE-----

--
The Mailing List for the Devon & Cornwall LUG
Mail majordomo@xxxxxxxxxxxx with "unsubscribe list" in the
message body to unsubscribe.


Lynx friendly