in reply to Perl Virus Scanner

Maybe not the best means , but nonetheless usefull. Reading this made me hmmm and errr about scanning emails. In a large enterprise, the cost of an email scanner is negligable and usually easily justified. Smaller businesses are not always so blessed, I wonder if MIME::Tools or similar could be combined with File::Scan as an email-scanner.


submersible_toaster
--bashing buttons

Replies are listed 'Best First'.
Re: Re: Perl Virus Scanner
by dingus (Friar) on Nov 20, 2002 at 11:08 UTC
    Smaller businesses are not always so blessed, I wonder if MIME::Tools or similar could be combined with File::Scan as an email-scanner.

    See the popfile project for an excellent base set of code.

    BTW a really simple regex that kills 99% of email viri is

    m!<iframe src=3Dcid:(\w+) height=3D0 width=3D0>.*Content-ID: <\1>!s

    Dingus


    Enter any 47-digit prime number to continue.
      dingus++ for interesting albeit broken link to http://popfile.sourceforge.net
      but I'm bucking for 'nother Linux deployment to replace an unhappy IMAP/POP server. Which means starting over....ah..
      i cant believe its a syntax error
Re: Re: Perl Virus Scanner
by Mr. Muskrat (Canon) on Nov 20, 2002 at 15:00 UTC

    You might want to look at the examples included with the latest version of File::Scan. They have included a procmail virus scanner script that uses MIME::Parser.