Your system does not have UTF-8 as locale setting (e.g. it uses a single 
byte charset).
Libarchive translates all path and file names to the used locale setting. 
This ZIP contains a path name with a UTF-8 character, which can be 
converted to the locale setting of your system.

from the libachive description:

--------
In order to get useful string data out of libarchive, this module 
translates
its input/output using the codeset for the current POSIX locale.  So you 
must
be using a POSIX locale that supports the characters in the pathnames of
the archives you are going to process, and it is highly recommend that you
use a UTF-8 locale, which should cover everything.
---------

It may also happen, that a spammer used wrong encoded characters in the 
path name to pass virus checks. Because AFC does not know what happens and 
is unable to scan the attachment, the attachment is blocked for security 
reasons.

Thomas




Von:    James Brown via Assp-test <assp-test@lists.sourceforge.net>
An:     ASSP development mailing list <assp-test@lists.sourceforge.net>
Kopie:  James Brown <jlbr...@bordo.com.au>
Datum:  07.06.2017 08:11
Betreff:        [Assp-test] Bad Attachment: Pathname cannot be converted 
from UTF-8 to current locale.



Anyone know how to get these archived scanned by AFC?


Jun-07-17 12:54:17 [Worker_2] Warning: possibly virus infected file (can't 
read entry in archive header) 
'/assp/tmp/zip_2_1496804057/80000797_798_Shipping_Documents.zip' - <-20> - 
Pathname cannot be converted from UTF-8 to current locale.
Jun-07-17 12:54:17 [Worker_2] Warning: warn - libarchive extract 
'/assp/tmp/zip_2_1496804057/80000797_798_Shipping_Documents.zip' - <-20> - 
Pathname cannot be converted from UTF-8 to current locale.
Jun-07-17 12:54:17 id-04046-19702 [Worker_2] [TLS-out] [Attachment] 
192.168.1.2 [OIP: 112.90.139.244] <2832...@qq.com> to: 
usern...@bordo.com.au SPAM FOUND bad attachment '80000797&798 Shipping 
Documents.zip' cause: 'possibly virus infected file (can't extract 
archive)'
Jun-07-17 12:54:17 id-04046-19702 [Worker_2] [TLS-out] 192.168.1.2 [OIP: 
112.90.139.244] <2832...@qq.com> to: usern...@bordo.com.au Message-Score: 
added 5 (baValencePB) for bad attachment '80000797&798 Shipping 
Documents.zip' cause: 'possibly virus infected file (can't extract 
archive)', total score for this message is now -20
Jun-07-17 12:54:17 id-04046-19702 [Worker_2] [TLS-out] [Attachment] 
192.168.1.2 [OIP: 112.90.139.244] <2832...@qq.com> to: 
usern...@bordo.com.au mail blocked by Plugin ASSP_AFC - reason 
BadAttachment
Jun-07-17 12:54:17 id-04046-19702 [Worker_2] [TLS-out] [Attachment] 
192.168.1.2 [OIP: 112.90.139.244] <2832...@qq.com> to: 
usern...@bordo.com.au [spam found] (BadAttachment) [fwd Fw Fw 80000797 798 
Shipping Documents] -> 
/assp/virii/fwd_Fw_Fw_80000797_798_Shipping_Documents--148368.eml;

ASSP 2.5.6(17151)

AFC 4.53

Thanks,

James.

------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
Assp-test mailing list
Assp-test@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-test






DISCLAIMER:
*******************************************************
This email and any files transmitted with it may be confidential, legally 
privileged and protected in law and are intended solely for the use of the 

individual to whom it is addressed.
This email was multiple times scanned for viruses. There should be no 
known virus in this email!
*******************************************************

------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
Assp-test mailing list
Assp-test@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-test

Reply via email to