SV: Exe and js in zip

[Trond M. Markussen]

Thanks Mark, it turns out that Maximum Archive Depth was set to 0 (which
disables scanning within archives as I understand it).

I have changed this value to 2 now, hopefully that will fix the problem :)

Regards,

Trond M.

-----Opprinnelig melding-----
Fra: MailScanner
[mailto:mailscanner-bounces+markussen=media24.no at lists.mailscanner.info] På
vegne av Mark Sapiro
Sendt: 24. mai 2016 07:50
Til: mailscanner at lists.mailscanner.info
Emne: Re: Exe and js in zip

On 05/23/2016 04:45 AM, Trond M. Markussen wrote:
> 
> What works best for blocking .exe and .js files within zip attachments?
> 
> We seem to have quite a few of these coming through



Default MailScanner config settings should block these

filename.rules.conf contains

deny    \.jse?$         Possible Microsoft JScript attack
                       JScript Scripts are dangerous in email

deny    \.exe$          Windows/DOS Executable
   Executable DOS/Windows programs are dangerous in email

And both MailScanner and virus scanners look inside zip archives.

-- 
Mark Sapiro <mark at msapiro.net>        The highway is for gamblers,
San Francisco Bay Area, California    better use your sense - B. Dylan


-- 
MailScanner mailing list
mailscanner at lists.mailscanner.info
http://lists.mailscanner.info/listinfo/mailscanner