> -----Original Message----- > From: Anthony Wood [mailto:[EMAIL PROTECTED] > Sent: Wednesday, 25 June 2003 9:41 AM > To: James Gray > Cc: [EMAIL PROTECTED] > Subject: Re: [SLUG] Opinions sought: Exim vs Sendmail > > > On Tue, Jun 24, 2003 at 04:45:42AM -0400, [EMAIL PROTECTED] wrote: > > > > > -----Original Message----- > > > From: Dinesh Birlasekaran [mailto:[EMAIL PROTECTED] > > > Sent: Tuesday, 24 June 2003 2:29 PM > > > To: James Gray > > > Subject: FW: [SLUG] Opinions sought: Exim vs Sendmail > > > > > > > > > > > > > > > Hi james, > > > > > > What anti virus are u using? > > > > > > Dinesh. > > > > We wrap NAI's "vscan" into inflex. Inflex handles the > > UUencode/decode, virus scanning and magic number calculation as > > well. We actually look at attached files to determine their content > > rather than rely on file names alone. For instance, if someone > > tries to send a Win32 .exe file by renaming it to bogus.txt or > > something, we calculate "bugus.txt" magic number and it will be > > detected as a potentially dangerous attachment and deleted. Quite > > quick and very effective when coupled with the virus scanner :-) We > > ditch hazardous attachments before running the virus scanner - which > > means we end up scanning a LOT of .zip files. > > Does your scanner unzip them and scan the included packages? > > Does your scanner run zipcracker (PVM enabled :-) to open > passworded zip files? > > cheers, > Woody
Yes it opens and recurses any common compressed formats (zip, tar, gz, tar.gz, hqx, arj, etc). As for password protected archives, if it finds one and can't open it, it deletes it and sends a small text-file attachment saying not send password protected compressed archives by e-mail, and to use our corp sftp server instead ;) As for zipcracker - I haven't come across that in a long time. Last I poked around with it, it would only handle passwords up to 4 characters...ot overly useful. I'd be interested in hearing more about it's performance etc. Cheers, James -- SLUG - Sydney Linux User's Group - http://slug.org.au/ More Info: http://lists.slug.org.au/listinfo/slug
