Mailscanner 4.28.5-2 and Unscanneabled Zips

[Julian Field]

The snag is that the error code is the same regardless of the problem. So
if the zip files couldn't be opened for some entirely innocent reason, such
as they were actually .tar.gz but called .zip, then they would be blocked.
But Winzip would still open them.
What do you think?

At 17:50 07/03/2004, you wrote:
>Support calls and emails asking about them would be one reason and the
>second reason would be to prevent it from becoming a form of DOS attack.
>It's just a suggestion.  I'd think it just be another Compress::Zip
>error code and it's take less resources to stop them than actually
>deliverying them.
>
>I have Symantec for Exchange running on our mailbox servers and it's
>taking care of the problem but I'm certain not everyone out there has
>the same setup that I do with MS watching the borders and Symantec
>watching internal mail.
>
>-=B
>
>
>-----Original Message-----
>From: MailScanner mailing list [mailto:MAILSCANNER at JISCMAIL.AC.UK] On
>Behalf Of Michele Neylon :: Blacknight Solutions
>Sent: Sunday, March 07, 2004 11:18 AM
>To: MAILSCANNER at JISCMAIL.AC.UK
>Subject: Re: Mailscanner 4.28.5-2 and Unscanneabled Zips
>
>If they are harmless it seems like a waste of resources stopping them,
>unless I am missing something....
>
>Mr. Michele Neylon
>Blacknight Internet Solutions Ltd
>http://www.blacknightsolutions.ie/
>http://www.search.ie/
>Tel. + 353 (0)59 9137101
>Lowest price domains in Ireland
>
> > -----Original Message-----
> > From: MailScanner mailing list [mailto:MAILSCANNER at JISCMAIL.AC.UK]On
> > Behalf Of Julian Field
> > Sent: 07 March 2004 16:05
> > To: MAILSCANNER at JISCMAIL.AC.UK
> > Subject: Re: [MAILSCANNER] Mailscanner 4.28.5-2 and Unscanneabled Zips
> >
> >
> > At 15:51 07/03/2004, you wrote:
> > >ThI think the Bagle/Beagle virus also has a bug in that it sends
> > >broken zip files not just password protected ones.  I've seen some
> > >unscanneable zips.  Can MailScanner next revision aplly the same rule
>
> > >to broken zips that it does for passord protected ones?
> >
> > But broken zips are harmless, so why stop them?
> > --
> > Julian Field
> > www.MailScanner.info
> > Professional Support Services at www.MailScanner.biz MailScanner
> > thanks transtec Computers for their support PGP footprint: EE81 D763
> > 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
> >
>
>
>--
>Email scanned by Blacknight for viruses and dangerous content.
>Visit http://www.blacknight.ie for more information

--
Julian Field
www.MailScanner.info
Professional Support Services at www.MailScanner.biz
MailScanner thanks transtec Computers for their support
PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654