Allow password protected/encrypted zip files from a singler sender

[Ed Bruce]

<x-flowed>
With the following ruleset:

From: ebruce at hpmich.com yes
To: edwardbruce at sbcglobal.net yes
FromOrTo: default no

I get the following results when I send an encrypted zip file:

Sep 27 16:50:50 mail2 postfix/smtpd[11139]: B995330A88E: client=unknown[65.170.178.192]
Sep 27 16:50:50 mail2 postfix/cleanup[10856]: B995330A88E: message-id=<41587C93.5040402 at hpmich.com>
Sep 27 16:50:52 mail2 postfix/nqmgr[10556]: B995330A88E: from=<ebruce at hpmich.com>, size=371237, nrcpt=1 (queue active)
Sep 27 16:50:52 mail2 postfix/nqmgr[10556]: B995330A88E: to=<edwardbruce at sbcglobal.net>, relay=none, delay=2, status=deferred (deferred transport)
Sep 27 16:50:56 mail2 MailScanner[10675]: ClamAVModule::INFECTED:: Encrypted.Zip:: ./B995330A88E/spring_wizardry.zip
Sep 27 16:50:56 mail2 MailScanner[10675]: ClamAVModule::INFECTED:: Encrypted.Zip:: ./B995330A88E/Copy of spring_wizardry.zip
Sep 27 16:50:57 mail2 MailScanner[10675]: Infected message B995330A88E came from 65.170.178.192
Sep 27 16:50:57 mail2 MailScanner[10675]: Saved entire message to /var/spool/MailScanner/quarantine/20040927/B995330A88E
Sep 27 16:50:57 mail2 MailScanner[10675]: Saved infected "spring_wizardry.zip" to /var/spool/MailScanner/quarantine/20040927/B995330A88E
Sep 27 16:50:58 mail2 MailScanner[10675]: Saved infected "Copy of spring_wizardry.zip" to /var/spool/MailScanner/quarantine/20040927/B995330A88E
Sep 27 16:50:58 mail2 MailScanner[10675]: Requeue: B995330A88E to A957037E49C



Peter Bonivart wrote:

> No Name wrote:
>
>> I have a similiar problem. I attempted to setup a ruleset, but no
>> matter what
>> I do it doesn't work. I've first tried:
>
>
> Some virus scanners mark encrypted files as viruses since they can't be
> scanned. What's the output of the scanner? I use your first example and
> it works just fine for me so I doubt MS is the problem.
>
> --
> /Peter Bonivart
>
> --Unix lovers do it in the Sun
>
> ------------------------ MailScanner list ------------------------
> To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
> 'leave mailscanner' in the body of the email.
> Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>

--
Ed Bruce
Health Plan of Michigan
Senior Programmer
Phone:  248.226.1512
FAX:    248.204.6569



--
This message, including any attachments, is intended solely for the use
of the named recipients(s) and may contain confidential and/or
privileged information. Any unauthorized review, use, disclosure or
distribution of this communication is expressly prohibited. If you are
not the intended recipient, please contact the sender by reply e-mail
and destroy any and all copies of the original message.

Thank you for your cooperation.

--
This message has been scanned for viruses and dangerous content by
Secure Resource, and is believed to be clean.
MailScanner thanks transtec Computers for their support.

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
</x-flowed>