Yes, it is v1.78i27 and yes the zip file had 0 bytes and nothing in the zip file. Should I be alarmed? Here is a example of the BANEXT config in my declude virus.cfg file. Let me know if this is wrong.
# The BANEXT option will let you ban file extensions. E-mails containing attachments # with these file extensions will be quarantined, and if you have a BANnotify.EML file, # it will be sent out. This works in the Standard and Pro versions. # BANEXT SCR BANEXT PIF BANEXT CMD BANEXT BAT BANEXT EXE BANEXT EZIP BANEXT B64 BANEXT BHX BANEXT HQX BANEXT MIM BANEXT UUE BANEXT UU BANEXT XXE BANEXT RAR # Dave -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of R. Scott Perry Sent: Monday, March 22, 2004 10:14 AM To: [EMAIL PROTECTED] Subject: Re: [Declude.Virus] Declude scanner Banning encrypted zip files. >I'm using the Declude Virus v1.78i27 with Sophos and using the BANEXT EZIP >but this email is still coming through. What can I do? Does it actually contain a .ZIP file with an encrypted file in it (there's a good change that some dumb mailserver AV program changed the attachment to a 0-byte file)? Have you double-checked that you are running 1.78i27 (by typing "\IMail\Declude" from a command prompt, without changing the path)? Does the line "BANEXT EZIP" have any spaces after the "EZIP"? Are there any lines below the "BANEXT EZIP" line (there should be)? -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com.
