On Fri, May 10, 2002 at 10:19:22AM +0100, Matthew Byng-Maddick (exim@???) wrote:
> I mentioned before on this list that I think you'd have to be criminally
> insane to want to scan mail for viruses on SMTP incoming. Spam != Virus
> mail. If you want to try scanning for something, you may want to scan
> 42.zip (a copy of which you can find at
> http://colon.colondot.net/~mbm/42.zip)
(note to readers: thats a recursively packed zip)
I see what your point is, but it only proves that you can break things
ON PURPOSE. Big deal. There will never be a real-world file like that, and
even if there was, noone would like to receive it anyway.
I agree that there may be the possibility of DoS with such files, but that
will depend on the scanner used, not on exiscan. Most
scanners (like uvscan) have no problems with such ill-formatted files.
For me, SMTP dialogue time AV scanning works perfectly, and it does
so for a lot of other people.
regards,
/tom
--
Tom Kistner <tom@???>
ICQ 1501527 dcanthrax@efnet
http://duncanthrax.net
