Guardian Digital Inc. >
InfoCenter >
Mailing List Archives >
Amavis
Amavis Mailing List Archive
Mike,
> Recently, we have implemented Amavis / ClamAV and it's basically put
> our Symantec scanner out of business. There is one item though that the
> Symantec scanner is catching (and causing us problems for) that Amavis /
> ClamAV is not. These are what Symantec is claiming to be mal-formed mime
> attachments. Can anyone shed any light on this? Does Amavis or ClamAV
> scan for this type of email threat?
There is no specific category for 'mal-formed mime attachments', but
if MIME::Parses reports an error in the mail structure, it is treated the same
as other 'bad header' cases (like invalid characters in the header).
What happens is controlled first by @bypass_header_checks_maps
and then by $final_bad_header_destiny.
If such mal-formed mail would happen to contain a virus, it is likely
to still be detected, although there is no absolute guarantee, as we
can't emulate all known and unknown bugs in mail browsers.
See also:
http://www.ijs.si/software/amavisd/#sec
Mark
-------------------------------------------------------
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now.
http://productguide.itmanagersjournal.com/
_______________________________________________
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/
|
....