[Mimedefang] fpscan temp reject on encrypted attachment

[David F. Skoll]

On Fri, 14 Oct 2011 16:32:39 +0100
Gary Forrest <garyf at netnorth.co.uk> wrote:

> Surely ( ? ) the default should be to allow an encrypted file through
> - and if not it should permfail it rather than tempfail as the
> outcome of the scanner should be identical with each run (the
> attachment will always be encrypted)

Correct.

> Is there a specific reason why it tempfails?

Well, because the authors of virus scanners (with the possible
exception of ClamAV) are as dumb as posts.  Their return codes on
failure are so vague as to be useless, so it's hard to decide what to
do.  Maybe years of programming on Microsoft Windows dulls your mind.

I agree with you that a permfail or accept is more appropriate.

Regards,

David.