[Mimedefang] mimedefang+file::scan - zipped W32/Netsky at MM goes through

Michal Jankowski Michal.Jankowski at fuw.edu.pl
Mon Feb 23 08:35:58 EST 2004


Michal Szymanski <msz at astrouw.edu.pl> writes:

> I have a Mimedefang v. 2.39 setup using File::Scan virus scanner.
> A few days ago I got a message containg "misc.zip" attachment
> with a "misc.rtf.pif" W32/Netsky at MM virus. It went through the filter
> pipeline unrecognized. Still, the standalone scanner "scan.pl" coming
> with File::Scan detects the virus if run on "misc.zip" file.

scan.pl checks individual members of .zip archives.

File::Scan module by itself does not.

You need to add some code to mimedefang-filter to achieve that. Stay
tuned, I'm working on it.

  MJ



More information about the MIMEDefang mailing list