[Mimedefang] patch to add blocking of encrypted email via uvscan
Lucas Albers
admin at cs.montana.edu
Mon Dec 8 16:45:59 EST 2003
> Huh? Where does the passphrase come from? It can't be good encryption if
> the
> virus scanner can get into it.
>
> OTOH, if the encrypted payload is identical each time, then the scanner
> can
> recognize it without decrypting it. But then we don't care if the payload
> is
> encrypted, because we already know it's hostile without opening it.
Beats me.
Encrypt a file.
zip -e virus.zip virus.
Then clamscan|f-prot it (with unarchive option), and it will see the virus.
Uvscan will not.
--Luke
More information about the MIMEDefang
mailing list