I am trying to understand this, but the reality doesn't work like I think
you are saying it should.  If I have the following in my virus.cfg file:

BANEXT   EZIP

with or without:

BANZIPEXTS  ON
BANEZIPEXTS  ON

I catch the encrypted/password protected virus files.  However, if I use
just:

BANZIPEXTS  ON
BANEZIPEXTS  ON

the virus files pass right through declude, reporting that the file is virus
free.  Am I simply not understanding how this is supposed to work.  I though
we no longer needed to use BANEXT EZIP.  Please enlighten me on the error of
my ways...  :-)

Thanks,

Bill
----- Original Message ----- 
From: "R. Scott Perry" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Tuesday, March 02, 2004 2:07 PM
Subject: RE: [Declude.Virus] New interim release to ban extensions in .ZIP
files


>
> >Do these new features, BANZIPEXTS and BANEZIPEXTS, stop both zip files
and
> >encrypted zip files if you do not have the BANEXT ZIP setting?
>
> Yes (using "BANEXT ZIP" would block all .ZIP files will be banned,
> regardless of what file extensions they may contain).
>
> >Just wondering if using the above forces us to block Zip files or not.
We
> >do not
> >want to block Zip files, but like the idea of blocking them if they
contain
> >an extension that we do want to block.
>
> The BANZIPEXTS/BANEZIPEXTS options will allow you to allow normal .ZIP
> files, while blocking .ZIP files that contain certain extensions.
>
>                                                     -Scott
> ---
> Declude JunkMail: The advanced anti-spam solution for IMail mailservers
> since 2000.
> Declude Virus: Catches known viruses and is the leader in mailserver
> vulnerability detection.
> Find out what you've been missing: Ask for a free 30-day evaluation.
>
> ---
> [This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]
>
> ---
> This E-mail came from the Declude.Virus mailing list.  To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.Virus".    The archives can be found
> at http://www.mail-archive.com.
>

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".    The archives can be found
at http://www.mail-archive.com.

Reply via email to