At 03:02 PM 6/15/2007, Bill Landry wrote: > > >I don't disagree. My comment was more toward the fact that many virus >scanners now support mime decoding and file unpacking themselves and >thus the decoding feature of amavisd-new can be disabled (meaning no >need to install and use unpackers within amavisd.conf, like ripole),
Amavisd-new cannot detect doc files with embedded executables without performing the decoding and running ripole. Skipping the decoding/unpacking greatly reduces the effectiveness of the banned_filenames feature of amavisd-new. Clamav can scan for malware in document files, but it must already have a signature. -- Noel Jones ------------------------------------------------------------------------- This SF.net email is sponsored by DB2 Express Download DB2 Express C - the FREE version of DB2 express and take control of your XML. No limits. Just data. Click to get it now. http://sourceforge.net/powerbar/db2/ _______________________________________________ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
