Re: [exim] Exim and Sophos command line AV wrong exit codes?

Top Page
Delete this message
Reply to this message
Author: Adam D. Barratt
Date:  
To: exim-users
Subject: Re: [exim] Exim and Sophos command line AV wrong exit codes?
On Sat, 2020-11-07 at 17:45 +0000, Mike Tubby via Exim-users wrote:
> 2. the return value 512 (really 2) is tripping on a password
> encrypted ZIP file for which there is no right thing to do:
>
>          a) accept it because we can't decrypt it [might still have
> a 
> virus]; or

>
>          b) reject it because we can't decrypt it [might not have a 
> virus but might be confidential customer data]

>
>      appears to be a loose-loose ;-(


fwiw what we do for $dayjob is to freeze them and get a human to make
the delivery decision. It's not foolproof, and depends on how many such
mails you're dealing with, but it works well enough for us.

Regards,

Adam