[Mimedefang] Oblivion.rar

[Matthew.van.Eerde at hbinc.com]

KAM wrote:
>> Disable the RAR engine?
> 
> Don't know how to do that.  Can you give any more hints?

Well, for ClamAV it's as simple as editing /etc/clamd.conf; change this line
ScanRAR
... to this:
#ScanRAR

Hopefully your decompression-scanners have a similar configurability.

I suppose there's still the worry that someone will slip a virus into a .rar, then rename it to .zip, and rely on the client's unzipper "helpfully" recognizing the RAR format despite the wrong extension.

-- 
Matthew.van.Eerde (at) hbinc.com               805.964.4554 x902
Hispanic Business Inc./HireDiversity.com       Software Engineer