Trey, Your correct by using the name+extension with 0 you are requiring an exact match.
We used the exact line in our scanners yesterday for the same virus. We still allow zip files to be scanned unless they are an exact match for that excluded name. On Thu, 2003-11-20 at 09:08, Trey Nolen wrote: > I believe you CAN combine the "two types." We have done it before. Using 0 > for the bytes matches that filename on any size file. > > Trey Nolen > > > > > Salvatore Toribio wrote: > > > > > I've received this report from Sophos > > > > > > Troj/Tofger-A may arrive attached to an email as a password protected > > > ZIP file. The email would have a blank subject line, the message text > > > "Hi! As I've promised I'm sending you my photo. Use old password: 123" > > > and an attached file named MyProfile.zip. > > > > > > It's a good idea to add this line in quarantine-attachment. > > > > > > MyProfile.zip 0 Virus Troj/Tofger-A > > > > AFAIK, this won't work with QS > > you can -either- reject based on extension (.zip) with: > > .zip<TAB>0<TAB>ZIP files rejected > > > > -or- reject a -specific- filename of -specific- bytes with: > > filename<TAB>size (in bytes)<TAB>Description of virus/whatever > > > > in other words, you can't combine the two "types" > > > > > > > > > > > > ------------------------------------------------------- > > This SF.net email is sponsored by: SF.net Giveback Program. > > Does SourceForge.net help you be more productive? Does it > > help you create better code? SHARE THE LOVE, and help us help > > YOU! Click Here: http://sourceforge.net/donate/ > > _______________________________________________ > > Qmail-scanner-general mailing list > > [EMAIL PROTECTED] > > https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general > > > > > > ------------------------------------------------------- > This SF.net email is sponsored by: SF.net Giveback Program. > Does SourceForge.net help you be more productive? Does it > help you create better code? SHARE THE LOVE, and help us help > YOU! Click Here: http://sourceforge.net/donate/ > _______________________________________________ > Qmail-scanner-general mailing list > [EMAIL PROTECTED] > https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general Ron Culler ------------------------------------------------------- This SF.net email is sponsored by: SF.net Giveback Program. Does SourceForge.net help you be more productive? Does it help you create better code? SHARE THE LOVE, and help us help YOU! Click Here: http://sourceforge.net/donate/ _______________________________________________ Qmail-scanner-general mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general
