About:
Yet Another antiVirus Recipe is a procmail that helps to filter out a lot of the most common e-mail worms. It detects worms with base-64 signatures (such as Klez, Hybris, and BugBear), HTML IFRAME exploits, CLSID hidden extension exploits, -XML code base exploits, executable extensions (bat, pif, vbs, vba, scr, lnk, com, and exe), and macros for doc, dot, xls, and xla files. It also detects most Nigerian scam e-mails.

Author:
nikant [contact developer]

Rating:	reset 1 2 3 4 5 6 7 8 9 10
8.63/10.00 (59 votes)

Tar/GZ:
http://s92562228.onlinehome.us/yavr/nkvir-rc.gz

Trove categories: [change]

[Development Status]		5 - Production/Stable
[Environment]		Console (Text Based)
[Intended Audience]		End Users/Desktop, System Administrators
[License]		OSI Approved :: GNU General Public License (GPL)
[Topic]		Communications :: Email :: Filters, Security

Dependencies: [change]
No dependencies filed

 Branches

Branch	Version	Last release	License	URLs
Default	2.1.2.9	04-Dec-2004	GNU General Public License (GPL)

 Releases

Version	Focus	Date
2.1.2.9	Minor feature enhancements	04-Dec-2004 01:17
2.1.2.8	Minor feature enhancements	18-Nov-2004 02:25
2.1.2.7	Minor feature enhancements	30-Oct-2004 14:48
2.1.2.6	N/A	24-Sep-2004 17:15
2.1.2.5	N/A	26-Aug-2004 13:18
2.1.2.4	N/A	10-Aug-2004 22:53
2.1.2.3	N/A	03-Aug-2004 00:26
2.1.2.2	N/A	20-Jul-2004 02:08
2.1.2.1	Minor feature enhancements	07-Jul-2004 23:36
2.1.2.0	N/A	27-Jun-2004 03:28

 Comments

[»] binary data in log
by Alex Ander - Sep 25th 2004 03:32:20

I see a lot of Skipped: in the log, accompanied by some binay data. What I'm doing wrong?

--
~~ Alex

[reply] [top]

[»] very nice
by k0nsl - Apr 21st 2004 09:45:28

I agree, very nice.

--
k0nsl, SysAdmin, system33r@gmail.com

[reply] [top]

[»] Work fine catching virus and spam
by redesb - Mar 7th 2004 02:26:43

I'am very impressed whith this procmail script, after installation the server is catching bad mail like a charm, between 60 and 320 spam/virus mail dairy. No i18n support, but maybe in the future. One of the most useful tools for procmail I test in long time. Thanks Nikos.

[reply] [top]

[»] YAVR
by Martin - Feb 25th 2004 05:05:21

Very impressed with this procmail recipe. Is proving extremely useful in filtering the junk from the collection of email addresses in use here.
Thanks very much and keep up the good work
Martin

[reply] [top]

[»] Re: YAVR
by Antoine - Mar 12th 2004 08:24:04

A very impressive recipe ! it catches nearly 100% of my daily spam. What is the 'host' command used at the end of the file in the SPAMHAUS recipe ? I'd like to use spamhaus checking but I don't know where this command comes from.

[reply] [top]

---

[»] Re: YAVR
by nikant - Mar 12th 2004 22:52:21


> A very impressive recipe ! it catches
> nearly 100% of my daily spam.
> What is the 'host' command used at the
> end of the file in the SPAMHAUS recipe ?
> I'd like to use spamhaus checking but I
> don't know where this command comes
> from.
>
>
Thank you for using YAVR.
YAVR is mostly a virus catching recipe. There are very powerfull tools for pure spam.
I added spamhaus checking because some viruses use open-relay mail servers as well.
You can find more info at www.spamhaus.org

"host" command is something like "nslookup". It is used to check for an IP to the spamhaus list of blacklisted servers. If it is found it returns a 127.0.0.2 or .4


[reply] [top]

---

[»] Re: YAVR
by Antoine - Mar 13th 2004 12:49:35


> Thank you for using YAVR.
> YAVR is mostly a virus catching recipe.
> There are very powerfull tools for pure
> spam.
> I added spamhaus checking because some
> viruses use open-relay mail servers as
> well.
> You can find more info at
> www.spamhaus.org
>
> "host" command is something like
> "nslookup". It is used to check for an
> IP to the spamhaus list of blacklisted
> servers. If it is found it returns a
> 127.0.0.2 or .4
>
And thank you very much for writing it !
I found the 'host' package, installed it and I must admit spamhaus checking works very well.
Sure, there are powerful bayesian filters for spam, but your recipe really suits my needs and catches every virus and nearly every spam I receive.

[reply] [top]

---