RE: encrypted zips / sophie

Yes.  Qmail-scanner is what I use for calling sophie in my qmail server.
It will now quarantine the file because the sophie status code returned
is 1 instead of 0 as before.  Status code = 1 means a virus.

---
Ed Henderson



> -----Original Message-----
> From: [email protected] 
> [mailto:[email protected]] On Behalf Of Trey Nolen
> Sent: Wednesday, March 03, 2004 9:30 AM
> To: Discussion about Virge/Sophie/Trophie/...
> Subject: Re: [vtools] encrypted zips / sophie
> 
> 
> Message
> >Now in qmail-scanner (which I use to call sophie) it will 
> detect the virus
> as "Error: File was encrypted".  Not pretty but it works...
> 
> 
> But what will it do with it at that point? Will it quarantine it?
> 
> Trey Nolen
> 
> 
> 
> > -----Original Message-----
> > From: [email protected]
> > [mailto:[email protected]] On Behalf Of Chris Edwards
> > Sent: Wednesday, March 03, 2004 7:43 AM
> > To: [email protected]; [email protected]
> > Cc: Alan Thew; Kenneth Stevenson
> > Subject: [vtools] encrypted zips / sophie
> >
> >
> > Hi,
> >
> > If anyone's interested, its easy to make sophie block 
> encrypted zips.
> >
> > In sophie_core.c find the "case
> > SOPHOS_SAVI_ERROR_FILE_ENCRYPTED:" and set
> > the return value to 1.
> >
> >
> >   case SOPHOS_SAVI_ERROR_FILE_ENCRYPTED:
> >   sophie_print(0, "%s %s", WARNSTR, 
> SOPHIE_SAVI_ERROR_FILE_ENCRYPTED);
> >   strncpy(ret_error_string, SOPHIE_SAVI_ERROR_FILE_ENCRYPTED,
> >  sizeof(ret_error_string)-1);
> >   #ifdef ONLY_FATAL_ERRORS
> >               retval = 1;
> >   #else
> >               retval = 1;
> >   #endif
> >
> >
> > Hope this is (some) use.
> >
> > I guess it would nice to have this as a run-time config
> > option ( Hi Vanja! )
> >
> > Chris
> >
> > --
> > Chris Edwards, Glasgow University Computing Service
> > _______________________________________________
> > vtools mailing list
> > [email protected]
> > http://www.vanja.com/list/listinfo.cgi/vtools
> >
> 
> 
> 
> _______________________________________________
> vtools mailing list
> [email protected]
> http://www.vanja.com/list/listinfo.cgi/vtools
> 
> _______________________________________________
> vtools mailing list
> [email protected]
> http://www.vanja.com/list/listinfo.cgi/vtools
>