Quarantine

[Steve Evans]

One possibility is to rename anything with a restricted file extension
to filename.extension.txt.  So setup.exe would become setup.exe.txt.  I
personally would never do this because of my bussiness situation but I
could see how it would be usefull for an ISP.  Of course if the virus
scanner marks it as a virus then it won't rename it, just block it, and
it would have to be an option.  Maybe even by file extension, like exe's
get renamed, vbs's just get blocked.

 
Steve Evans
Computing Services
(619) 594-0653
 


-----Original Message-----
From: Julian Field [mailto:mailscanner at ECS.SOTON.AC.UK] 
Sent: Monday, August 12, 2002 3:40 AM
To: MAILSCANNER at JISCMAIL.AC.UK
Subject: Re: Quarantine


At 11:26 12/08/2002, you wrote:
>My gut feeling is to delete virus infected files however files rejected

>because the filename rules, and are clean, could be treated differently

>as they can be renamed to something 'safe' before passing on to the 
>intended recipient.

How might the "safe renaming" happen? We need a general rule that can be
applied to any "dangerous" filename.
--
Julian Field                Teaching Systems Manager
jkf at ecs.soton.ac.uk         Dept. of Electronics & Computer Science
Tel. 023 8059 2817          University of Southampton
                             Southampton SO17 1BJ