On Sat, 2020-11-07 at 17:45 +0000, Mike Tubby via Exim-users wrote:
> 2. the return value 512 (really 2) is tripping on a password
> encrypted ZIP file for which there is no right thing to do:
>
> a) accept it because we can't decrypt it [might still have
> a
> virus]; or
>
> b) reject it because we can't decrypt it [might not have a
> virus but might be confidential customer data]
>
> appears to be a loose-loose ;-(
fwiw what we do for $dayjob is to freeze them and get a human to make
the delivery decision. It's not foolproof, and depends on how many such
mails you're dealing with, but it works well enough for us.
Regards,
Adam