Re: corrupted files reported by sophie & SAVI

Markus Stumpf <[email protected]>
Newsgroups gmane.comp.security.virus.vtools
Organization SpaceNet AG, Muenchen, Germany
Message-ID <[email protected]>
On Tue, Jan 27, 2004 at 11:53:58AM +0100, Maciej Uhlig wrote:
> what about 'Mime' set to '0' in your config file? looks like it's not
> sufficient...

for i in */Magi*
do
/var/qmail/antivirus/bin/scan_file /var/run/sophie $PWD/$i
done
FILE INFECTED: [/home/maex/Viren/W32/Magistr-A] (VIRUS: W32/Magistr-A)
FILE INFECTED: [/home/maex/Viren/W32/Magistr-B] (VIRUS: W32/Magistr-B)

I do - however - not depend on Sophos do decode MIME messages.
I decode MIME messages with "reformime". Messages that have broken MIME
coding (hard truncated bounces e.g.) are rejected.

	\Maex

-- 
SpaceNet AG            | Joseph-Dollinger-Bogen 14 | Fon: +49 (89) 32356-0
Research & Development |       D-80807 Muenchen    | Fax: +49 (89) 32356-299
"The security, stability and reliability of a computer system is reciprocally
 proportional to the amount of vacuity between the ears of the admin"
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.