Sobig.E Getting Through Intermittently

[Ron E.]

I have also noticed this - one idea maybe is to check file extensions of
files within .zip files - perhaps mailscanner should block zip or other
compressed files that contain only disallowed files.

So, for instance, a .zip that contains only a .pif, which is how Sobig.E
spreads, would be blocked.

Actually any compressed file with a .pif, .scr, .bat, etc., I would be
willing to block regardless if it was the only thing in the file or not -
if it's one of those, 9 out of 10 it's a virus anyway.

What do you think, Julian?

Regards,

Ron

On Thu, 26 Jun 2003, Kevin Spicer wrote:

> > I got these ones: your_details.zip
> > Wanna have it ? =)
>
> I'll give it a miss this time, but thanks for the offer ;)
>
>
>
>
> BMRB International
> http://www.bmrb.co.uk
> +44 (0)20 8566 5000
> _________________________________________________________________
> This message (and any attachment) is intended only for the
> recipient and may contain confidential and/or privileged
> material.  If you have received this in error, please contact the
> sender and delete this message immediately.  Disclosure, copying
> or other action taken in respect of this email or in
> reliance on it is prohibited.  BMRB International Limited
> accepts no liability in relation to any personal emails, or
> content of any email which does not directly relate to our
> business.
>