I just discovered something odd with our amavisd-new / clamav installation :
note: our amavisd-new is dated from 2002/12/27. The problem might have been solved since then.
When this version receives an encrypted zip files with
$bypass_decode_parts = 0; (the default value in the conf file)
it doesn't pass it to the av_scanners after failing to uncompress it.
I had to change $bypass_decode_parts to make the whole system detect encrypted archives...
Imagine my surprise when I received "Worm.Bagle.Gen-zippwd" myself !
amavisd-new users may want to check their setup...
Best regards,
-- Lionel Bouton - inet6 --------------------------------------------------------------------- o Siege social: 51, rue de Verdun - 92158 Suresnes / _ __ _ Acces Bureaux: 33 rue Benoit Malon - 92150 Suresnes / /\ /_ / /_ France \/ \/_ / /_/ Tel. +33 (0) 1 41 44 85 36 Inetsys S.A. Fax +33 (0) 1 46 97 20 10
-------------------------------------------------------
This SF.Net email is sponsored by: Oracle 10g
Get certified on the hottest thing ever to hit the market... Oracle 10g. Take an Oracle 10g class now, and we'll give you the exam FREE. http://ads.osdn.com/?ad_id=3149&alloc_id=8166&op=click
_______________________________________________
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users
