On Thu, 04 Mar 2004 at 12:08:57 +0100, Laurent Wacrenier wrote:
> Tomasz Papszun wrote:
> > Despite adding to the submission page (in BIG fontsize!) this request:
> > 
> > "DO NOT SUBMIT naked zip files IF their contents is DETECTED as infected
> > by ClamAV AFTER UNZIPPING"
> > 
> > they keep submitting these idiotic samples.
> 
> You may change the virus submission CGI to make the check.
> 

Not quite. Password-protected zip files can't be scanned inside.

Detecting that a zip file is encrypted and rejecting it (available only
since a very recent CVS version) isn't a good solution either as a
submitter can have a valid reason to encrypt some sample intentionally.

-- 
 Tomasz Papszun   SysAdm @ TP S.A. Lodz, Poland  | And it's only
 [EMAIL PROTECTED]   http://www.lodz.tpsa.pl/   | ones and zeros.
 [EMAIL PROTECTED]   http://www.ClamAV.net/   A GPL virus scanner


-------------------------------------------------------
This SF.Net email is sponsored by: IBM Linux Tutorials
Free Linux tutorial presented by Daniel Robbins, President and CEO of
GenToo technologies. Learn everything from fundamentals to system
administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click
_______________________________________________
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users

Reply via email to