I see the same behavior here so we are trapping all .zip at the SMTP gateway.
-----Original Message----- From: Reasoner, Bob (PHES) [mailto:[EMAIL PROTECTED] Sent: Tuesday, March 02, 2004 8:07 AM To: Exchange Discussions Subject: RE: [EMAIL PROTECTED] For extension blocking trend only looks one level. If an exe is in a zip it will scan it using the AV patterns, but it won't block it. At least 6.2 works that way. -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Chinnery, Paul Sent: Tuesday, March 02, 2004 8:58 AM To: Exchange Discussions Subject: RE: [EMAIL PROTECTED] But it would seem to me that if you are blocking, for example .exe, when Trend digs down into the zip file and sees that extension, it should block the file due to it containing a file with that extension. Paul Chinnery Network Administrator Mem Med Ctr -----Original Message----- From: Bailey, Matthew [mailto:[EMAIL PROTECTED] Sent: Monday, March 01, 2004 4:27 PM To: Exchange Discussions Subject: RE: [EMAIL PROTECTED] Trend does examine zips but with no pattern file to compare it against it doesn't do much good. - Matt -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Sent: Monday, March 01, 2004 2:25 PM To: Exchange Discussions Subject: [EMAIL PROTECTED] Looks like another variant. Trendmicro doesn't have anything on it, neither does Norton. McAfee does though. We just received one in a zip file (I thought Trend examined zips?). Either way, we've started blocking zips, too. _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&; lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] To unsubscribe via postal mail, please contact us at: Jupitermedia Corp. Attn: Discussion List Management 475 Park Avenue South New York, NY 10016 Please include the email address which you have been contacted with. _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&; lang =english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] To unsubscribe via postal mail, please contact us at: Jupitermedia Corp. Attn: Discussion List Management 475 Park Avenue South New York, NY 10016 Please include the email address which you have been contacted with. _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&; lang =english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] To unsubscribe via postal mail, please contact us at: Jupitermedia Corp. Attn: Discussion List Management 475 Park Avenue South New York, NY 10016 Please include the email address which you have been contacted with. _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&; lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] To unsubscribe via postal mail, please contact us at: Jupitermedia Corp. Attn: Discussion List Management 475 Park Avenue South New York, NY 10016 Please include the email address which you have been contacted with. _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] To unsubscribe via postal mail, please contact us at: Jupitermedia Corp. Attn: Discussion List Management 475 Park Avenue South New York, NY 10016 Please include the email address which you have been contacted with.
