You can rename a file all you want and stick it in a zip file...it still
won't work with Symantec's product.

Symantec is smart enough that it doesn't look just at the extension of the
file in question, it looks inside the properties of the file somehow and
determines what the file type is that way.

We've had people try it and it doesn't work...they still get blocked at the
firewall.

-----Original Message-----
From: Ben Winzenz [mailto:[EMAIL PROTECTED] 
Sent: Wednesday, August 20, 2003 6:23 AM
To: Exchange Discussions
Subject: RE: SAV for SMTP Gateways - blocking extensions within ZIP??


It's known behavior (i.e. default and Symantec knows about it).  If you want
someone to send you a zip file that contains a file with an extension you
are blocking, you can either have them password-protect it (which Symantec
can't scan - assuming you are not blocking encrypted containers), or have
them rename the file in the zip. 


Ben Winzenz
Network Engineer
Gardner & White
(317) 581-1580 ext 418


-----Original Message-----
From: Alverson, Tom [mailto:[EMAIL PROTECTED] 
Posted At: Tuesday, August 19, 2003 5:03 PM
Posted To: Exchange (Swynk)
Conversation: SAV for SMTP Gateways - blocking extensions within ZIP??
Subject: SAV for SMTP Gateways - blocking extensions within ZIP??



I am running Symantec Antivirus for SMTP gateways version 3.1.0.29. This has
an option to block attachments by extension, but this blocks files even when
they are in ZIP files.  The Symantec (Norton) antivirus that runs on our
exchange server (5.5) has a registry setting to control whether or not it
looks in ZIP files for bad extension (it always scans for viruses in ZIP
files). 

Does anyone know how to configure SAV for SMTP gateways to allow "bad"
extensions when they are stored in ZIP files?

Tom
 

_________________________________________________________________
List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
Web Interface:
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&;
lang=english
To unsubscribe:         mailto:[EMAIL PROTECTED]
Exchange List admin:    [EMAIL PROTECTED]



_________________________________________________________________
List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
Web Interface:
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang
=english
To unsubscribe:         mailto:[EMAIL PROTECTED]
Exchange List admin:    [EMAIL PROTECTED]

_________________________________________________________________
List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
Web Interface: 
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang=english
To unsubscribe:         mailto:[EMAIL PROTECTED]
Exchange List admin:    [EMAIL PROTECTED]

Reply via email to