[Fwd: RE: [Mimedefang] not catching test viruses]

[Bill Maidment]

Hi

I'm using mimedefang-2.39 spamassassin-2.63 clamav-0.65 file-scan-0.79 
and the following tests slip through

5, 17, 18, 19 and 20

Tests 8 and 22 get through, but the attachment gets dropped because of 
the extension.

Cheers
Bill

Cormack, Ken wrote:

>>The ones that slipped by for me were #17,#18.
>>
>>19# and 20# showed up, but they were stripped, and it was just a blank
>>emails.
>>    
>>
>
>The bodies were blank, but look at the headers.  (In Outlook, Open the
>message, then go to "View/Options" and scroll through the Internet header.)
>
>  
>
>>You can catch clsid with this extension match:
>>    
>>
>
>  
>
>>$bad_exts =
>>    
>>
>'<snip>... |\{[^\}]+\})';
>
>  
>
>>This is my current bad_ext match.
>>    
>>
>
>The above is in my bad_exts list, too, but still the CLSID seemed to slip
>through (dont know why yet... I see no typo in my definition.)
>
>Ken
>_______________________________________________
>Visit http://www.mimedefang.org and http://www.canit.ca
>MIMEDefang mailing list
>MIMEDefang at lists.roaringpenguin.com
>http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
>
>  
>