Hi all,
I had a returned bounce coming back with the Word document having gotten
corrupted. This caused MIMEDefang to tempfail when virusscanning. I found out
that it was caused by the Norman Virus Control scanner which gives reply code
11 for corrupted files and archives while MIMEDefang does not support that
code.
I'm not running Kaspersky AVP5, but if I read the code right, then this patch
should make NVC handle these type of files the same as is done for AVP, i.e.
mark them as suspicious so that in the filter what to do with them.
Kind regards,
Guido
--
I realize that command does have its fascination, even under
circumstances such as these, but I neither enjoy the idea of command
nor am I frightened of it. It simply exists, and I will do whatever
logically needs to be done.
-- Spock, "The Galileo Seven", stardate 2812.7
--- mimedefang.pl.in.orig 2004-11-23 18:25:11.617352701 +0100
+++ mimedefang.pl.in 2004-11-23 18:25:25.009090810 +0100
@@ -4267,6 +4267,12 @@
return ($code, 'virus', 'quarantine');
}
+ # Corrupt files/archives found -- treat as suspicious
+ if ($code == 11) {
+ $VirusName = 'suspicious';
+ return ($code, 'suspicious', 'quarantine');
+ }
+
# No scan area given or something went wrong
return ($code, 'swerr', 'tempfail');
}
_______________________________________________
Visit http://www.mimedefang.org and http://www.canit.ca
MIMEDefang mailing list
[EMAIL PROTECTED]
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
