Re: Allow this type of password protected file

Peter Farrow via MailScanner <mailscanner-qhrM8SXbD5JTOyd/[email protected]> Thu, 22 Sep 2022 10:43:44 +0100

Newsgroups	gmane.mail.virus.mailscanner
Message-ID	<[email protected]>

Dear Danita,

You should NEVER allow password-protected files.

A would be attacker sends a password-protected file, then sends the 
password and the victim opens the file and any malicious content gets 
let into the network "just like that".

Whitelisting the sender means your network security relies on their 
network security.  Its not an issue it is "by design".

Pete

	
Peter Farrow BEng(Hons) BBC ETSI
Office: 01249 736180 | <tel:01249 736181>
Mobile: +44 (0) 7799605617 <tel:+44 (0) 7799605617>
Email: [email protected] <mail:[email protected]>
Website: www.togethia.it <https://www.togethia.it>
<https://facebook.com/togethiait> <skype:peter_farrow>

On 22/09/2022 10:39, Danita Zanrè wrote:
> Hello everyone.  Can someone remind  me of what I would need to do to 
> allow these files through, or just whitelist this particular sender?  
> I believe this is probably a "Sophos" issue, but you are my go-to 
> group for solving these issues!
>
> Sophos: Password protected file 
> /data/MailScanner/incoming/27332/8AA72173CF1.A944B/HKB_TA1142P1_2022090918190400000709_EM_Stmt_01_20220909_000190.zip/HKB_TA1142P1_2022090918190400000709_EM_Stmt_01_20220909_000190.PDF
>
> Thanks for any help here!
>
> Danita
>
>
>



-- 
MailScanner mailing list
mailscanner-qhrM8SXbD5JTOyd/[email protected]
http://lists.mailscanner.info/mailman/listinfo/mailscanner

OpenPGP_0x67CA5C7785A4003A.asc (application/pgp-keys, 2.4 KB)

-----BEGIN PGP PUBLIC KEY BLOCK-----
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=uYQs
-----END PGP PUBLIC KEY BLOCK-----

OpenPGP_signature (application/pgp-signature, 665 B) - not displayed