On Thu August 3 2006 17:37, Gary V wrote: > Maurizio wrote: > > > i edit a file test.txt, i write test into it; i uesed winzip to zip it and > > encrypt using password; i used Zip 2.0 compatible encryption; > > > now, in 20-debian_defaults i put: > > # [ qr'^\.(zip|rar|arc|arj|zoo)$'=> 0 ], # allow any within such archives > > [ qr'^UNDECIPHERABLE$'=> 0 ], > > qr'.\.(exe|vbs|pif|scr|bat|cmd|com|cpl)$'i, # banned extension - basic > > > http://paste.debian.net/10192 to see the entire piece > > i force-reloaded and i still get > > Aug 3 17:06:08 mailgw1 amavis[21263]: (21263-06) Blocked INFECTED > > (Encrypted.Zip), [81.174.7.176] <[EMAIL PROTECTED]> -> <[EMAIL PROTECTED]>, > > Message-ID: <[EMAIL PROTECTED]>, mail_id: > > Z3F3xNNlnjpm, Hits: -, 200 ms > > > but it is not infected! > > > what i am missing? > > TIA > > Looks like your antivirus software thinks it is infected.
Blocked INFECTED (Encrypted.Zip) IMHO: amavis cannot open the file as it is password protected; so the mail is filtered by policy, it is not passed to clamav to be scanned isn't it? > What do you > get if you submit the file to http://virusscan.jotti.org/ ? server busy at this smoment :( -- Maurizio Marini ------------------------------------------------------------------------- Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT & business topics through brief surveys -- and earn cash http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV _______________________________________________ AMaViS-user mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
