Re: [Declude.Virus] Treatment of double layered extension files

2002-12-19 Thread R. Scott Perry


I saw a few weeks ago about a thread discussion that talked about 
the 'catching' of double layered extension files (i.e. file.shs.txt), 
however I couldn't find it in the archive.  I wanted to see if these 
indeed get caught as banext (i.e. shs) , as I think this maybe a dull 
point if they contain a virus as the scanner should catch it and thus tip 
Declude to quarantine it, however my thoughts were if it was not a virus 
file.  Thanks for the info.

If there is a virus, the E-mail will get caught.

If there is no virus, but the extension is banned (for example, a file 
named "file.txt.shs" will get banned if you use "BANEXT SHS").

If you do not ban the file extension, and no virus is detected, the E-mail 
will be allowed through.  This is the part where some people have requested 
a change, so that you would be able to ban any file with double 
extensions.  However, this gets tricky to implement with such filenames as 
"yahoo.com.url" and ones with 4-character extensions ("file.jpeg.exe" 
versus "my.program.exe").
-Scott

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".The archives can be found
at http://www.mail-archive.com.


[Declude.Virus] Treatment of double layered extension files

2002-12-19 Thread Keith Johnson
Title: Treatment of double layered extension files






Scott,

    I saw a few weeks ago about a thread discussion that talked about the 'catching' of double layered extension files (i.e. file.shs.txt), however I couldn't find it in the archive.  I wanted to see if these indeed get caught as banext (i.e. shs) , as I think this maybe a dull point if they contain a virus as the scanner should catch it and thus tip Declude to quarantine it, however my thoughts were if it was not a virus file.  Thanks for the info.

___


Keith Johnson, MCP

Network Engineer

Network Advocates, Inc.

Tel:   502.412.1050

Fax:  502.412.1058

Email:  [EMAIL PROTECTED]


"Good pings come in small packets"