stopping clamav detecting encrypted zip files

Julian Field MailScanner at ecs.soton.ac.uk
Fri May 18 22:08:18 IST 2007


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1



Hugo van der Kooij wrote:
> On Fri, 18 May 2007, Ugo Bellavance wrote:
>
>> I also agree that we should have an option, or that clamav should 
>> never identify a passwd-zip as a virus.  The MS setting is there and 
>> at least, one can release it if MS stops it.
>
> How about adjusting the scripts for the scanners to follow the 
> preferences?
>
> So if the normal action would be to allow password protected zip files 
> it should also trickle down as option to each AV ascanner called upon 
> by MS.
That's what it does at the moment (without the proposed patch). The 
problem is that MailWatch doesn't like releasing a file that contains a 
virus. The clamavmodule scanner only has 2 options with 
password-protected archives: either ignore them completely or tag them 
as viruses.

Hence the patch to make clamavmodule ignore them, and MailScanner finds 
them on its own when it unpacks all the message attachments. As they are 
tagged as passworded archives instead of viruses, MailWatch will let you 
have them.

Jules.
>
> It's just a suggestion but perhaps others may think the idea makes sense.
>
> Hugo.
>

Jules

- -- 
Julian Field MEng CITP
www.MailScanner.info
Buy the MailScanner book at www.MailScanner.info/store

MailScanner customisation, or any advanced system administration help?
Contact me at Jules at Jules.FM

PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
For all your IT requirements visit www.transtec.co.uk



-----BEGIN PGP SIGNATURE-----
Version: PGP Desktop 9.6.1 (Build 1012)
Charset: ISO-8859-1

wj8DBQFGThY+EfZZRxQVtlQRAtiZAJ9+7GHSWigdlECwfup8kfDIeawaKACeLq+h
l/Ubwcvgo27d7BhSMx0rqIA=
=JzZ1
-----END PGP SIGNATURE-----

-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.
For all your IT requirements visit www.transtec.co.uk



More information about the MailScanner mailing list