<p>On Tue, 25 Jan 2011 13:46:10 +0800, Curu Wong <prinbra@gmail.com> wrote:</p>
<blockquote type="cite" style="padding-left:5px; border-left:#1010ff 2px solid; margin-left:5px; width:100%"><!-- html ignored --><!-- head ignored --><!-- meta ignored -->
<p>My question is, what's the better solution? can we tell if a RAR archive is multi-volumed and just skip processing it? Is it a good policy to restart ms itself(due to external failure) and do the exact same(should always fail) action toward the offending message?</p>
</blockquote>
<p>From a security standpoint it is unwise to allow such files. I could craft my malware to split the malicious code into multiple archives and avoid detection.</p>
<p>From my point of view one should supply an alternative method for exchanging files that can't comfortably fit into a sngle message.</p>
<div>
<pre>--
hvdkooij@vanderkooij.org http://hugo.vanderkooij.org/
PGP/GPG? Use: http://hugo.vanderkooij.org/0x58F19981.asc</pre>
</div>