At 23:25 2004-03-02 +0200, Moti wrote:
I also have W32/[EMAIL PROTECTED] coming through in the encrypted zip.
I have all executable attachments blocked using perlscanner but of course
perl scanner cannot open an encrypted zip.
I was thinking that the most logical solution is to run perlscanner on the
output of "unzip -l"
(file listing, works even on password protected zips) this way if it has
file types you don't like the scanner will throw them out.
Did anyone cook up such a patch? (additionaly perlscanner pass on output of
unzip -l)

I would also be interested in such a patch, or such functionality integrated into qmail-scanner.
In a situation where certain file types in zip files are blocked by perlscanner, I can't see why they should be allowed in password-protected zip files if it's possible to list the contents of the archive.


According to the CHANGES file, there seem to be other opinions on this though:

*       Try to workaround problem with password-protected zip files, without
        losing information about the files. NOTE: password-protected files
        show up in the logs, but aren't checked against the perlscanner
        database. This is a *FEATURE* - not a bug.

Any further thoughts on why this is considered a feature?

Thanks,

Patrik



-------------------------------------------------------
SF.Net is sponsored by: Speed Start Your Linux Apps Now.
Build and deploy apps & Web services for Linux with
a free DVD software kit from IBM. Click Now!
http://ads.osdn.com/?ad_id=1356&alloc_id=3438&op=click
_______________________________________________
Qmail-scanner-general mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general

Reply via email to