On Wed, 2004-05-05 at 06:55, Lionel Bouton wrote:
> Hi,
>
> I just discovered something odd with our amavisd-new / clamav installation :
> note: our amavisd-new is dated from 2002/12/27. The problem might have
> been solved since then.
It has.
> When this version receives an encrypted zip files with
> $bypass_decode_parts = 0; (the default value in the conf file)
> it doesn't pass it to the av_scanners after failing to uncompress it.
> I had to change $bypass_decode_parts to make the whole system detect
> encrypted archives...
>
> Imagine my surprise when I received "Worm.Bagle.Gen-zippwd" myself !
>
> amavisd-new users may want to check their setup...
There was a patch posted to this mailing list (check the archives, or
maybe someone else will repost it) that allows sending the entire
message with all headers to clamd, in addition to the individual parts.
The patch, or a newer version of amavisd-new, is required to catch
the password protected zip files.
-Bill
-------------------------------------------------------
This SF.Net email is sponsored by: Oracle 10g
Get certified on the hottest thing ever to hit the market... Oracle 10g.
Take an Oracle 10g class now, and we'll give you the exam FREE.
http://ads.osdn.com/?ad_id=3149&alloc_id=8166&op=click
_______________________________________________
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users
