Missed virus?

[Kevin Spicer]

On Fri, 2003-09-05 at 20:23, Antony Stone wrote:

>> And of course MailScanner didn't pick up the .com file & block it.

>Well, that is what I would expect (not picking it up) since
>MailScanner's
>file extension rules definitely only apply to the actual file being
>attached.

I agree thats correct, but thats why my test results...

>>I performed a test myself, which I hoped would imitate the message
>>which
>>the original post was about.  I created an email with email.com and
>>eicar.zip attached, then forwarded the email as an attachment to
>>myself.  Both Sophos(savi) and Clam picked up both copies of eicar,
>>whats more MailScanner also blocked the com file.
             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
surprised me (pleasantly).  I didn't really expect that MailScanner
would recurse through attached emails (Julians too clever by half!).
Which begs the question why didn't it recurse through the attached
message in Gerry's file.




BMRB International
http://www.bmrb.co.uk
+44 (0)20 8566 5000
_________________________________________________________________
This message (and any attachment) is intended only for the
recipient and may contain confidential and/or privileged
material.  If you have received this in error, please contact the
sender and delete this message immediately.  Disclosure, copying
or other action taken in respect of this email or in
reliance on it is prohibited.  BMRB International Limited
accepts no liability in relation to any personal emails, or
content of any email which does not directly relate to our
business.