Questions...

Rob Poe rpoe at PLATTESHERIFF.ORG
Wed Mar 24 16:03:51 GMT 2004


Yes, but then I'm getting infected NON Passworded files that are passing
by :)



>>> mailscanner at ECS.SOTON.AC.UK 3/24/2004 9:12:02 AM >>>
At 14:48 24/03/2004, you wrote:
>These zipped virii are killing me.  First they come as passworded -
ok,
>we got that taken care of.  Now, they come as .arj.  Ok .. Not
allowed.
>Now we're scanning for .exe and stuff inside of zips, and while
that's
>all good and that, since we're scanning inside of .zip files - the
file
>extension rules apply...I have a client that does a lot of .zip
traffic,
>and it's killing him..
>
>Ideas????

Set it to ban password-protected zip files, but set the Maximum
Archive
Depth to 0 so it doesn't do filename checking inside Zip files. I
quote
from MailScanner.conf:

# A common useful setting is this option = 0, and Allow
Password-Protected
# Archives = no. That block password-protected archives but does not
do
# any filename/filetype checks on the files within the archive.
Maximum Archive Depth = 0
--
Julian Field
www.MailScanner.info
MailScanner thanks transtec Computers for their support

PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654



More information about the MailScanner mailing list