Exes within Zips

Peter Peters P.G.M.Peters at utwente.nl
Wed Mar 10 12:03:31 GMT 2004


On Wed, 10 Mar 2004 10:53:44 -0000, you wrote:

>I'm using version 4.28.5 and while I think that stopping encrypted .zip
>files is a good idea with the spate of Netsky permutation viruses, it is
>causing slight problems in that now if someone sends a zipped .exe file,
>MailScanner stops it by default.  Zipping used to be a way of circumventing
>MailScanner's filename rules but clearly no longer.

I have seen something strange with this same kind of situation. I
archive df and qf files but a message with a zip and two exe's had only
the zip and the two exe's quarantained.

I am still trying to find out whether somebody released the message from
quarantaine by way of mv instead of cp.

>What's my best way around this?  For now I've simply asked the recipient to
>ask the sender to rename the .zip file .tar or .lzh or .arj.

I have seen situations where .tgz files were handled like protected
zip's.

--
Peter Peters, senior netwerkbeheerder
Dienst Informatietechnologie, Bibliotheek en Educatie (ITBE)
Universiteit Twente,  Postbus 217,  7500 AE  Enschede
telefoon: 053 - 489 2301, fax: 053 - 489 2383, http://www.utwente.nl/civ



More information about the MailScanner mailing list