Questions...

Julian Field mailscanner at ecs.soton.ac.uk
Wed Mar 24 15:12:02 GMT 2004


At 14:48 24/03/2004, you wrote:
>These zipped virii are killing me.  First they come as passworded - ok,
>we got that taken care of.  Now, they come as .arj.  Ok .. Not allowed.
>Now we're scanning for .exe and stuff inside of zips, and while that's
>all good and that, since we're scanning inside of .zip files - the file
>extension rules apply...I have a client that does a lot of .zip traffic,
>and it's killing him..
>
>Ideas????

Set it to ban password-protected zip files, but set the Maximum Archive
Depth to 0 so it doesn't do filename checking inside Zip files. I quote
from MailScanner.conf:

# A common useful setting is this option = 0, and Allow Password-Protected
# Archives = no. That block password-protected archives but does not do
# any filename/filetype checks on the files within the archive.
Maximum Archive Depth = 0
--
Julian Field
www.MailScanner.info
MailScanner thanks transtec Computers for their support

PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654



More information about the MailScanner mailing list