Does anyone have a solution for stopping the zip of death?
It shouldn't affect Declude Virus.
This script sends the 42.zip recursive archive to the mail server. If there is an antivirus filter, it may start eating huge amounts of CPU or memory. 42.zip: ZIP archive, 42K, composed of nested zips (nested 6 levels deep, each level 17 wide) - produces a file 4GB in size and will reportedly crash 'most email virus checkers'.
In this case, a well behaved virus scanner would see that the size of the file(s) was too big, and respond appropriately (preferably with an error code indicating a suspicious file).
However, the beauty of Declude Virus is that even if the virus scanner crashes, it won't crash the server. That one E-mail will get through, but the E-mail itself isn't a problem (if the recipient opens it, he'll have a similar problem -- he'll need 4GB of space on the hard drive in order to open it, and should get very suspicious by the amount of time it is taking to unzip).
-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers.
Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection.
Find out what you've been missing: Ask about our free 30-day evaluation.
--- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
--- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com.
