Office files again...

[Jason Ede]

We have someone sending word documents through our MailScanner and although the documents were written on office 2007 they assure me that the files were saved in 97-2003 format and from investigation it does look like the file in the email had a .doc extension as opposed to a .docx. However, it seems like mailscanner seems to think its an archive still and is finding 2 .rel files for each doc file attached to an email. What is the best way round this?

I'm trying to decide between changing Maximum Archive Depth to 0 or adding a rule(s) to the filetypes file to allow these .rel files. If the Archive depth is 0 then I assume the files are still scanned for viruses as long as the virus scanner has access to the compression libraries at compile time (thinking more of clamav there). Are there any other problems with setting this value to 0?

Below are the reports from MailScanner for 2 emails. The first contained one word doc and the second contained 2.

Jason




The virus detector said this about the message:
Report: Report: MailScanner: Attempt to hide real filename extension
(themeManager.x10.rel)
Report: MailScanner: Attempt to hide real filename extension
(themeManager.x11.rel)
----------------------------------

The virus detector said this about the message:
Report: Report: MailScanner: Attempt to hide real filename extension
(themeManager.x10.rel)
Report: MailScanner: Attempt to hide real filename extension
(themeManager.x13.rel)
Report: MailScanner: Attempt to hide real filename extension
(themeManager.x11.rel)
Report: MailScanner: Attempt to hide real filename extension
(themeManager.x12.rel)
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20080116/20e068f3/attachment.html