.zip file passes through the filter

[Wei Li]

Hi, all,

We met a .zip virus in our system and have to block all encrypted .zip
files. I  modified  filename.rules.conf in /opt/MailScanner/etc as

#allow  \.zip$                  -       -
deny    \.zip$

and in filetype.rules.conf I denied:
deny    archive         -                       -
deny    self-extract    No self-extracting archives     No self-extracting archives allowed

But the infected .zip file still could pass through the filter. We are using the latest mcfee data file.

Any suggestion?

Thanks a lot

Wei