Re: quarantine-attachments.txt

At 10:00 +0200 21-04-2006, Cristina Tanzi Tolenti wrote:
>Hi,
>
>I use qmail-scanner 1.25st, qmail 1.03 and clamav
>I setup a quarantine-attachments.txt file to block people from 
>sending our users .exe, .pif, etc. files.  .zip files are allowed 
>through, but apparently my system is even rejecting messages that 
>contain .exe, .pif, etc. files WITHIN .zip files.
>
>This is not what I want to happen.  I'd like to be able to receive 
>zip files that contain anything, but not receive plain .exe, .pif, 
>etc. files.
>

Just disable redundant scanning, edit 
/var/qmail/bin/qmail-scanner-queue.pl and set:

my $redundant_scanning='0';


In this way some PIF files will go through and it is really not good, 
because a PIF file only could be a virus, so if it was blocked by 
quarantine-attachments your antivirus had not detected it due ii is a 
very new virus and the update has not yet arrive...

Maybe it is better to instruct your user to rename the files that 
must get through to an 'unknown' extension, for example:

	prova.exe -> prova.ex

The recipient must rename it again, remember to an 'unknown' extension...

In this way the antivirus will check them so you still will be almost 
protected.

Regards

ST


-------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642