From: Alex Satrapa (alex.satrapaapf.edu.au)
Date: Wed Oct 05 2005 - 19:32:19 CDT

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

On 6 Oct 2005, at 07:41, Martin Schmitt wrote:

> First, I want to reject files with "executable" extensions, including
> files inside encrypted ZIP archives. The latter is perfectly trivial to
> implement (unzip -l encrypted.zip), but nobody seems to have done it
> before.

I've missed something here - does unzip have the ability to decrypt
encrypted ZIP archives without being given a password?

> Second, I want to skip virus scanning altogether when the decision to
> reject a message has been made based on the executable rule described
> above.

What about using renattach (http://www.pc-tools.net/unix/renattach/) as
part of your filters? I haven't used it, but it turned up when I asked
Google about removing EXE files.

> Third, I'd like to have the EXE filter functionality in one single
> place, not distributed across Postfix, Amavis and some sort of "dummy
> virus scanner" that would probably be needed to do the encrypted ZIP
> thing.

The first place it's implemented would be where it happens - if
anything else duplicates the functionality, that doesn't matter since
the stuff that's going to be removed will have already been removed.

Alex Satrapa
IT Support
Australian Phenomics Facility
Building 117, Garran Road
Australian National University

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]