Sophos and multi volume archives

[Martin Hepworth]

Joseph

there a line in MailScanner.conf..

Allowed Sophos Error Messages = "corrupt", "format not supported"

Amend this so it's got the appropriate error message in it..


--
Martin Hepworth
Snr Systems Administrator
Solid State Logic
Tel: +44 (0)1865 842300


Joseph Watson wrote:
> I am running
> Mandrake 10.0
> MailScanner
> Sophos
> DrWeb
> F-prot
>
> I just recently tried to send a multi volume archive zip file that I created
> with WinZip "Split" function.  Sophos picked this up and returned the
> following message: (part of multi volume archive).  So it was blocked. I
> could not find a way to control this behavior with Sophos, so I had to turn
> off Sophos to get this email through (I had to get just this one out).  Does
> anyone know if this is controllable??
>
> This brings up a question thought.  How can you allow emails with multi
> volume archives but still protect yourself from possible bad guys using this
> method??
>
> Any thoughts?
>
> - Regards
>
> Joseph Watson
>
> ------------------------ MailScanner list ------------------------
> To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
> 'leave mailscanner' in the body of the email.
> Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>
> Support MailScanner development - buy the book off the website!

**********************************************************************

This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom they
are addressed. If you have received this email in error please notify
the system manager.

This footnote confirms that this email message has been swept
for the presence of computer viruses and is believed to be clean.

**********************************************************************

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!