Problems with zips in 4.28.6-1

[Julian Field]

At 17:29 11/03/2004, you wrote:
>Hi!
>
> > Sorry to ask this again but no one has replied to my earlier
> > posting regarding a problem with 4.28.6-1 and encrypted zips.
> >
> > Could someone who is using MailScanner 4.28.6.-1 + f-prot 4.4 and
> > allows encrypted zips to pass please confirm that they pass correctly
> > as I find all encrypted zips are stopped even if Allow
> > Password-Protected Archives is set to yes.
>
>Sure, F-Prot thinks its a virus, so it will catch them. Are you sure its
>busting 'all' ones or just ones that really look like the virus stuff
>floating around?

At the request of someone else, I added a bit to the F-Prot parser so that
it traps password-encrypted zip files as their contents cannot be scanned
and are therefore unsafe, which is playing it safe in the same way that
MailScanner does for most other things.

Look in SweepViruses.pm in ProcessF-ProtOutput (the "-" might not be there)
and you will find a line or 2 that mentions "encrypted". If you just change
that string to something that won't appear then you will stop this check
working.
--
Julian Field
www.MailScanner.info
Professional Support Services at www.MailScanner.biz
MailScanner thanks transtec Computers for their support
PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654