Re: problems scanning .sit (Stuffit) files

Martin Zuziak <[email protected]> Thu, 23 Mar 2006 09:19:43 +0100
Newsgroups gmane.comp.security.virus.vtools
Message-ID <[email protected]>
On Wed, Mar 22, 2006 at 10:07:09PM +0100, Markus Stumpf wrote:
> Hoi,
> 
> today a customer had problems sending a stuffit file:
>     Error: Not supported in this SAVI implementation
> checking the logs I have noticed that happend (not too frequently)
> before from/to various addresses/customers, so I tend to think it is
> not a corrupted file (the error message would be different, too).
> Checked it with a few (rather old) .sit file I had lurking on the
> disk and none produced that error.
> 
> Anybody else seen this? Is there a new version of Stuffit out that could
> cause this (could find date infos on their website)? Any workaround (I
> haven't found a "don't check Stuffit" option like there is a "don't
> check hqx" option neither in the sophie configs nor in my (slightly
> dated) SAVI documentation).

There is a stuffit option in sophie.savi but it defaults to 0. If you
are running an older savi version you could try upgrading it.

Otherwise, like I wrote in a mail yesterday, you can recompile sophie
with the --enable-only-fatal-err option to configure or patch
sophie_core.c, look for SOPHOS_SAVI_ERROR_NOT_SUPPORTED. There don't
seem to be a configuration file option for ignoring non-fatal errors.

You could also see if your scanning software has an option to let mail
pass when sophie returns an error.

Sincerely,

Martin Zuziak <[email protected]>