That's what I was thinking. Because the AV can't scan password protected Zip files, than I would just drop them. Plus we don't use password protected zip files. So is there a way or not? For now I'm just using the header_checks to block by subject, since they seem to be the same. But I'm thinking for the future someone might use the same characteristics, but using ramdom subjects and body contents to spread.
----- Original Message ----- From: "Bill Landry" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Tuesday, March 02, 2004 6:54 PM Subject: [IMGate] Re: Email with password protected attachments are defeating Virus Scanners > > Why not? If the zip files are not password protected, then you can > effectively virus scan them. But if they are password protected, then you > can't, so block them. > > Bill > > >
