[Mimedefang] unzipping archives

Marco van Berkum m.v.berkum at rdc.nl
Thu Jan 29 07:22:42 EST 2004


Hi,

Let's first introduce myself since I'm new to this list. I'm a perl geek 
and I
work for an ASP as network administrator. I also have my own perl project
called 'Hackbot'. Recently I configured a in-transit mailscanning anti 
spam system,
with MIMEDefang/spamassassin/nvcc, for the company. Works excellent!
Now, there's one functionality that I'd like to have in defang, 
unzipping of
archives to be able to scan them for possible virusses.

I do know the risk of potential  DoSattacks but considering the fact 
that lots of
virusses are being sent in a ZIP attachment and considering that there 
are still
brainless users that actually unzip them and get infected (?!).

I would like to make this code for MIMEDefang primarily for myself but 
I'd like to
contribute the code too if wanted. The only issue that I have is wether 
I should
let Defang unzip the files and then feed them to the mailscanner or 
simply let
defang rip the zipped attachment and feed that one directly to the 
virusscanner.

Or am I overlooking already available functionality now ? :)

just my $00.1
grtz,
Marco van Berkum




More information about the MIMEDefang mailing list