Sophos thinks multi-part spanning zips are viruses

[Martin Sapsed]

James Corell wrote:
> Actually, I'd like MailScanner not to consider an attachment a virus unless
> Sophos CONFIRMS that it is actually a virus (rather than simply failing to
> be able to scan it).

I think adding "part of multi volume archive" to the "Allowed Sophos
Error Messages" configuration item should do the trick.

Julian's philosophy is to deliver only that which he believes from the
information available to be safe. Because it would be very difficult to
assemble the parts of the attachment together so that he can be checked
properly, they're treated as potentially hostile and blocked.

You're suggesting a philosophy of deliver it unless you know it's not
safe which is slightly different.

Cheers,

Martin

--
Martin Sapsed
Information Services               "Who do you say I am?"
University of Wales, Bangor             Jesus of Nazareth