[Mimedefang] When to do Virus checks

David F. Skoll dfs at roaringpenguin.com
Thu Nov 30 11:32:15 EST 2006


Paul Murphy wrote:

[Disguise VIRUS.EXE as README.TXT]

> I'd be prepared to wager that 90% plus would allow it through...because
> they have configured their virus scanner to only scan potentially
> damaging files, and they decide that a file is potentially damaging
> based on the user-provided file extension.

Anyone running MIMEDefang shouldn't accept it, because the
virus-integration code tries as hard as possible to convince the
associated virus scanner to scan all files, regardless of extension.

Regards,

David.



More information about the MIMEDefang mailing list