>Can you comment on this Scott? Any danger here?
The decompression of archived files is handled by the AV software, not
Declude. Therefore, the potential for a problem here would depend on the
AV software that you are using. Unfortunately, I don't have any
information about how the various virus scanners handle this situation.
If the AV software is properly designed, in the worst case, it should
handle the situation gracefully (immediately deleting any files it creates
as soon as disk space is used up). If this happens, the disk space will be
used only temporarily. This could potentially allow the one E-mail to be
delivered, even if there was a virus in a separate attachment. However,
that would either require that the recipient open an attachment when there
were two or more attachments present, which would likely be a "red flag"
for most users (why would they be sent this second file that they don't need?).
This should not create a DoS situation. The hard drive should only be full
for a fraction of a second (if at all), which should only cause minor
inconveniences (IE one incoming E-mail might get re-routed through a backup
server, or a user retrieving their mail may get a temporary error message
but get their mail when re-trying it).
-Scott
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus". You can E-mail
[EMAIL PROTECTED] for assistance. You can visit our web
site at http://www.declude.com .
