Re: corrupted files reported by sophie & SAVI
Markus Stumpf <[email protected]>
| Newsgroups | gmane.comp.security.virus.vtools |
|---|---|
| Organization | SpaceNet AG, Muenchen, Germany |
| Message-ID | <[email protected]> |
On Tue, Jan 27, 2004 at 11:53:58AM +0100, Maciej Uhlig wrote: > what about 'Mime' set to '0' in your config file? looks like it's not > sufficient... for i in */Magi* do /var/qmail/antivirus/bin/scan_file /var/run/sophie $PWD/$i done FILE INFECTED: [/home/maex/Viren/W32/Magistr-A] (VIRUS: W32/Magistr-A) FILE INFECTED: [/home/maex/Viren/W32/Magistr-B] (VIRUS: W32/Magistr-B) I do - however - not depend on Sophos do decode MIME messages. I decode MIME messages with "reformime". Messages that have broken MIME coding (hard truncated bounces e.g.) are rejected. \Maex -- SpaceNet AG | Joseph-Dollinger-Bogen 14 | Fon: +49 (89) 32356-0 Research & Development | D-80807 Muenchen | Fax: +49 (89) 32356-299 "The security, stability and reliability of a computer system is reciprocally proportional to the amount of vacuity between the ears of the admin"