lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Message-ID: <200403051312.AA1202454812@tooterfish.com>
From: incidents at tooterfish.com (Incident List Account)
Subject: Re: E-Mail viruses

Curt, be carefull not to strain your arm patting yourself on the back :) I actually really like your solution UNTIL the "completely eliminates the need for antivirus on the mail server" comment. If an outside party follows the procedure and remnames his file to file1.inc and sends it to your user, are you 100% confident in that outside party's attachement is not inadvetantly infected with a virus? I agree that only allowing a certain obscure extension through to your user eliminates the VAST majority of the problems. I would not however trust any file from a third party with out some sort of scan.


> Methinks you misunderstand.  Only the proprietary extension, i.e. .inc or
> .xyz or .whatever, would be allowed through, and since virus writers would
> never use this extension, it would eliminate ALL viruses at the gateway.
> The nice thing about this approach is that it completely eliminates the need
> for any anti-virus on the mail server since all virus attachments are
> automatically dropped without the need for scanning.  Quite a simple, yet
> elegant solution, if I do say so myself.
> 
> Curt Purdy CISSP, GSEC, MCSE+I, CNE, CCDA
> Information Security Engineer
> DP Solutions
> 
> ----------------------------------------
> 
> If you spend more on coffee than on IT security, you will be hacked.
> What's more, you deserve to be hacked.
> -- White House cybersecurity adviser Richard Clarke
> 
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.netsys.com/full-disclosure-charter.html
> 


____________________________________________________________
Free 20 MB Bannerless Domain Hosting, 1000 MB Data Transfer
10 Personalized POP and Web E-mail Accounts, and more.
Get It Now At www.doteasy.com




Powered by blists - more mailing lists

Powered by Openwall GNU/*/Linux Powered by OpenVZ