[IP] more on anti-spamware says zip files are "safe"!

[Dave Farber <dave@farber.net>]

-----Original Message-----
From: Suresh Ramasubramanian <suresh@hserus.net>
Date: Wed, 04 Feb 2004 20:27:49 
To:dave@farber.net
Cc:bobr@bobrosenberg.phoenix.az.us
Subject: Re: [IP] anti-spamware says zip files are "safe"!

Dave Farber  [2/4/2004 8:13 PM] :

> Below is an example of one of two things:
> 
> 1>  .zip files do NOT and can NOT contain viri or other forms of malware, or
> 
> 2>  anti-spam software is teaching the bad guys how to get around and past the
> anti-spam software.


Actually, this is an indication that the exim mailserver below is 
configured with an ancient "exim_filter" script, use of which has long 
been deprecated in favor of other methods of filtering, such as 
exiscan_acl (http://duncanthrax.net/exiscan-acl/)

Back when exim_filter was in use (abuot two years back?) virii that came 
in zips, or even password protected zips, weren't all that common.  And 
this particular exim_filter treats attachments with the .eml extension 
(like stuff forwarded as an attachment by outlook) as malware.

 >>> epsiloncl4.hostspectrum.com with local (Exim 4.24)

Your friend's webhost just has to upgrade his exim version, and use 
exiscan-acl instead of the old exim_filter script.

BTW, exim / http://www.exim.org is a really good GPL'd mailserver, the 
default mailserver supplied with the cpanel webhosting application (and 
with debian linux).

	srs

-------------------------------------
To manage your subscription, go to
  http://v2.listbox.com/member/?listname=ip

Archives at: http://www.interesting-people.org/archives/interesting-people/