False Positive, How do I resolve this?
MailScanner at ecs.soton.ac.uk
Fri Apr 4 22:54:29 IST 2008
Matt Kettler wrote:
> Rose, Bobby wrote:
>> Password protect zip unless you are blocking that.
> That shouldn't matter either. It might stop it, but it shouldn't.
> You can still read the filenames of a password protected zipfile
> without the password, so there's no technical reason why MailScanner
> can't still apply filename rules to encrypted zipfiles.
And indeed it does. You can even switch it on and off, of course :-)
Straight out of MailScanner.conf:
# Normally, you can still get the filenames out of a password-protected
# archive, despite the encryption. So by default filename checks are still
# done on these files. However, some people want to suppress this checking
# as they allow a few people to receive password-protected archives that
# contain things such as .exe's as part of their business needs. This option
# can be used to suppress filename checks inside password-protected
# This can also be the filename of a ruleset.
Check Filenames In Password-Protected Archives = yes
Julian Field MEng CITP CEng
Buy the MailScanner book at www.MailScanner.info/store
MailScanner customisation, or any advanced system administration help?
Contact me at Jules at Jules.FM
PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
PGP public key: http://www.jules.fm/julesfm.asc
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.
More information about the MailScanner