On Thu, Mar 04, 2004 at 12:35:55PM +0100, Tomasz Papszun wrote: > On Thu, 04 Mar 2004 at 12:08:57 +0100, Laurent Wacrenier wrote: > > Tomasz Papszun wrote: > > > Despite adding to the submission page (in BIG fontsize!) this request: > > > > > > "DO NOT SUBMIT naked zip files IF their contents is DETECTED as infected > > > by ClamAV AFTER UNZIPPING" > > > > > > they keep submitting these idiotic samples. > > > > You may change the virus submission CGI to make the check. > > > > Not quite. Password-protected zip files can't be scanned inside. > > Detecting that a zip file is encrypted and rejecting it (available only > since a very recent CVS version) isn't a good solution either as a > submitter can have a valid reason to encrypt some sample intentionally.
Suggestion: Add a web form field for typing in the password, then you can scan inside the zip, or reject an encrypted zip without a password. -- Erik Corry I'd be a Libertarian, if they weren't all a [EMAIL PROTECTED] bunch of tax-dodging professional whiners. - B. Breathed. ------------------------------------------------------- This SF.Net email is sponsored by: IBM Linux Tutorials Free Linux tutorial presented by Daniel Robbins, President and CEO of GenToo technologies. Learn everything from fundamentals to system administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click _______________________________________________ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
