From owner-freebsd-questions@freebsd.org Thu Mar 24 07:42:11 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 03C4FADC1B1 for ; Thu, 24 Mar 2016 07:42:11 +0000 (UTC) (envelope-from kraduk@gmail.com) Received: from mail-wm0-x22a.google.com (mail-wm0-x22a.google.com [IPv6:2a00:1450:400c:c09::22a]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id A4D971F58; Thu, 24 Mar 2016 07:42:10 +0000 (UTC) (envelope-from kraduk@gmail.com) Received: by mail-wm0-x22a.google.com with SMTP id l68so53637331wml.1; Thu, 24 Mar 2016 00:42:10 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc; bh=seTn/EijkR2gw85eCtAlih0Ay+CNikRL41+W7ZJk2Cw=; b=tjA2gBYN+YjGjfsueE8sltiQo0vzRNBlOl1DBus3UrlUUH3TKJBhPlTMmEJJkzZnK0 CgPxBJn9H0sP+MQROEsz97HpQ/Q+VhbD6WvZFmLLoqoGFAzsSWohGkxos9mM+VqW+Bux 4aUQZkhE7MYw7Clf8CeQrGuaCZD3IoW6VFQs89tTdBeN8pWWKXpMddlCFuS5asFD1Lrd Hv930d7FQJCb9MnJHKKrvgCwN+xSIv5nkVqfcKQF2gVITlibJXwf22gtnZIXo6Hme01D YMJA0R8kyypSotsKZSz8kvczfXMrewR2ltuCHS3pFrfa5bqBM7567c4FM8OOX+B2gNVK e1cw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:date :message-id:subject:from:to:cc; bh=seTn/EijkR2gw85eCtAlih0Ay+CNikRL41+W7ZJk2Cw=; b=UnBAVs6JKyb3RG8eOWflRopfPtRmrJQvTgLD7d2i50irvjQRUWuDKsf0F6g5ABFQVN zTvuzsRbndFwcphkX/Ut2ug4JSTxAL9BPssT5O+BsKbB8MEwOZswp9+EvNDuO2O+vqDr dft2i6X5EzJnDNjn87yygOTqF2kHfeJ4n6CH77CWHJr2dXpfc3yYYZvxF9da7a6YRkQV PYgpfBdKUHFaQ9tBxOgF2lD0vM6GzZpwd0WdAmEp+6dbmNE6n15aZu0xfA1m58Pb2HPx TRKn8IUHmzrE1XwalI+6pPCMnIaQA3Bq5K9UoNoZDycQ+AMXnq+a4LBdYv1dus8jqUsy Zbsg== X-Gm-Message-State: AD7BkJKPcap0WgMV3ytTGYCaQr/tyDd+VI+C4nS/qwGIKDeyZwr4yMfExViR+6kjj0AvHI4KSWKozaxzgenFBA== MIME-Version: 1.0 X-Received: by 10.194.83.42 with SMTP id n10mr8211381wjy.20.1458805329293; Thu, 24 Mar 2016 00:42:09 -0700 (PDT) Received: by 10.28.46.68 with HTTP; Thu, 24 Mar 2016 00:42:09 -0700 (PDT) In-Reply-To: References: <56F2CC22.9090500@FreeBSD.org> Date: Thu, 24 Mar 2016 07:42:09 +0000 Message-ID: Subject: Re: [Phishing]Re: Anti-virus for FreeBSD From: krad To: Olivier Nicole Cc: Matthew Seaman , FreeBSD Questions Content-Type: text/plain; charset=UTF-8 X-Content-Filtered-By: Mailman/MimeDel 2.1.21 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.21 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 24 Mar 2016 07:42:11 -0000 But a picture can contain a 1000 words, and it also engages different areas of the brain. However is an email a place for pictures? One can easily link to something, and thus side step the whole issue. On 24 March 2016 at 04:46, Olivier Nicole wrote: > Matthew, > > > It is not possible a priori to strip out any file belonging to some > > arbitrary application which implements some sort of embedded macro > > language, let alone tell if any such file actually contains any > > executable bits. > > If you know the format of the file, I believe you can scan it and find > if it contains macro. It's time consuuming and implies you have a large > knowledge of what every file looks like. Anti virus do that. > > > This is essentially the approach taken on these (FreeBSD) mailing lists, > > except here, it's reversed: all attachements are removed, except for a > > certain number of known-harmless ones, like PGP-Mime signatures or some > > simple text formats. > > I think one of the reason, beside security, is to keep the list lean: if > you allow attachements, you quickly end up with email send in the form > of Words documents... > > If you cannot explain your problem using plain ASCII only, then you have > to rethink what you are trying to explain first :) > > best regards, > > olivier > _______________________________________________ > freebsd-questions@freebsd.org mailing list > https://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to " > freebsd-questions-unsubscribe@freebsd.org" >