[Mimedefang] W32/Bagle.p at MM spreading as rar

[Chris Masters]

://www.rarsoft.com/rar_add.htm
> 
> > Anybody scannin inside rars?
> 
> Not yet -- they just get blocked.
> 

I've attempted to write a rar filter (that can scan
files like I currently do zip -
recursively/passwordprotected/size restraints etc) and
have come up against a couple obstacles:
 
- seems redhat provide no native support (rpm) for
rars.
- winrar and rarsoft provide trial linux binaries.
- unrar is freeware (not sure if this is correct
term?) and there are rpms available.
- the only Perl module available wraps winrar i.e. it
parses the rar command output. It's a bit buggy and
doesn't handle the winrar linux executable output very
well. Wholy inefficient. Can't handle password
protected command-line output.

I written half the filter but I think the best option
is to block by default.

__________________________________
Do you Yahoo!?
Yahoo! Mail - More reliable, more storage, less spam
http://mail.yahoo.com