spamtrap71892316634 at ANIME.NET
Wed Mar 3 19:41:32 GMT 2004
On Wed, 3 Mar 2004, Julian Field wrote:
> At 19:03 03/03/2004, you wrote:
> >Would it be possible for Mailscanner to unzip password protected zipfiles
> >the same way some of the virus scanners do? Eg look for the text string in
> >the message.
> >It would make mailscanner work with f-prot to catch W32/Bagle.
> They aren't doing exactly that, I believe. They are simply looking for
> key-strings in the mail message or looking for details of the contents/size
> of the zip file.
> With the modern Zip encryption schemes, decrypting them is not trivial.
Well, what techniques would be practical to add to mailscanner?
Interfacing with /usr/bin/unzip (which does handle encryption)?
More information about the MailScanner