[Mimedefang] Oblivion.rar
Kevin A. McGrail
kmcgrail at pccc.com
Wed Apr 12 11:37:59 EDT 2006
I tried moving the virus scanning routines to filter_end after the rejection
check (i.e. after return if message_rejected();).
However, I don't believe that fixes the issue because the default action for
a bad filename is to drop with warning and I am calling
action_quarantine_entire_message.
So after I see that the bad_filename is seen, I am still seeing the virus
scanner firing and going into the ether.
I've also submitted the file to McAfee's Avert and it's bombing that too ;-)
Thoughts?
KAM
> > We don't even WANT rar files and they are blocked in the bad attachment
> > list.
> > However, we are running the virus scan in filter_begin but the
bad_filename
> > check in filter & filter_multipart.
>
> So run the virus scan in filter_end instead. And be sure not to run
> it if the message has already been rejected.
More information about the MIMEDefang
mailing list