On Fri, Jul 02, 2004 at 02:54:27PM +0000, Payal Rathod wrote:
> Hi,
> Is it possible to block file types using qmail-scanner? If yes how do I
> do it? I want to block exe, com etc. hereby reducing the load by not
> invoking antivirus at all for those attachment types.

Can't be done exactly as you want with standard Q-S I'm afraid.

Even if you block by attachment filename/extension, Q-S will still run any
AV you have defined over the files before blocking them. This was because
everyone else using Q-S wanted to know that "file.pif" was actually "the XXX
virus" if the AV knew it. i.e. they wanted file extension blocking to act as
a failsafe JUST IN CASE the current AV could catch some new virus.

The order in which Q-S does AV and then attachment blocking can be changed
(it's only perl afterall), but it isn't a configurable option.

Basically, Q-S isn't about causing the least load on your system: it's about
catching the most viruses/etc. The two are mutually exclusive.

-- 
Cheers

Jason Haar
Information Security Manager, Trimble Navigation Ltd.
Phone: +64 3 9635 377 Fax: +64 3 9635 417
PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB FE1D 66D1


-------------------------------------------------------
This SF.Net email sponsored by Black Hat Briefings & Training.
Attend Black Hat Briefings & Training, Las Vegas July 24-29 - 
digital self defense, top technical experts, no vendor pitches, 
unmatched networking opportunities. Visit www.blackhat.com
_______________________________________________
Qmail-scanner-general mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general

Reply via email to