ANNOUNCE: Unstable 4.28.1 released

[Rick Cooper]

> -----Original Message-----
> From: MailScanner mailing list
> [mailto:MAILSCANNER at JISCMAIL.AC.UK]On
> Behalf Of Julian Field
> Sent: Monday, March 01, 2004 10:37 AM
> To: MAILSCANNER at JISCMAIL.AC.UK
> Subject: ANNOUNCE: Unstable 4.28.1 released
>
>
> Some code to help you with the current outbreak of
> viruses hiding inside
> zip files.
>
> It will scan zip archives down to a max nesting depth set in
> MailScanner.conf like this:
>          Maximum Zip Archive Depth = 3
>
> So now you can employ filename and file content checks
> on files hidden in
> zip files. If the zip file is password-protected, then
> zero-length versions
> of each of its members will be created, so you can
> still do filename checks.
>
> Finding a bad file inside a zip file results in the
> entire message being
> marked as bad, not just the zip file. I intend to fix
> that later.

When you work on that, would it be possible to designate separate
files for the file name and type rules? For instance
archive.filename.rules.conf and I could have an entry like:

deny
(?:Picture|caroline|Katrina|kleopatra|Caitie|Mary-Anne|Lisa|Bad
girl,Julie|Aline|Anna|Barbi|Katrina|Juli|Mary|Mandy|Sara|rebecca|
Jammie,kate|Audra|stacy|Rena|Kelley|Tammy|myfotos|Gallery|It_I|Ph
otoalbum,Photomontage)\.(?:pif|exe|scr)$        Zipped Worm Bagle-G
Detected        Zipped Worm Bagle-G Detected

allow \.exe$

Basically allow for a different policy for files inside archives
than is enforced for raw files.

>
> You must install the Perl module Archive::Zip first,
> before trying to run
> this version. It will not run without it, and none of
> the installation
> scripts will install it for you. I suggest something like this:
>          perl -MCPAN -e shell
>          install Archive::Zip
> It has a few dependencies, which is why I haven't had
> a chance to package
> it all up for you.
> --
> Julian Field
> www.MailScanner.info
> MailScanner thanks transtec Computers for their support
>
> PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947
> 1415 B654
>
> --
> This message has been scanned for viruses and
> dangerous content by MailScanner, and is
> believed to be clean.
>
>