Results 1 to 2 of 2

Thread: Blocking file extensions inside of zip & rar files.

  1. #1
    Join Date
    Dec 2008

    Blocking file extensions inside of zip & rar files.

    I'm not sure if I should be asking this in the Email forums or in SpamBlocker, but since I am using SB3 I thought I would try here first.

    Due to the increase of viruses/trojans being sent out inside of zip files that clamav is not detecting, is there any way to block .exe and .com files that are compressed in zip files?

    They're getting through clamav but a few hours later when I resend the effected email to a test account, clamav then detects the virus. Clamav is set to update hourly and I believe they are new viruses or variants that arent added to clamav's database for several hours.

    On clamav's defense, they also arent being detected by either Microsoft Security Essentials or Norton AV 2010 right away but a couple hourly updates later, they are. (Only given the option of "this file is suspicious, send a copy to us" prompt when I scan them manually.)

  2. #2
    Join Date
    Jun 2003
    SpamBlocker is the name of the method I use in my SpamBlocker Technology-powered exim.conf file, an old version of which is stupplied with DirectAdmin. It blocks emails from your server by reputation of the sender server (by IP#). It doesn't accept email, so it can't look at it. And it can't look into any files attached to it, becaue it never allows the email onto the server.

    If the IP# isn't on a reputation blocklist, then you'd have to use either ClamAV or SpamAssassin on your server (you can call either from your exim.conf file but neither is installed or turned on in exim.conf by default), or local software on your desktop(s).

    If ClamAv isn't doing enough for you there are commercial packages available for linux and BSD based servers, which you can buy, install, and enable through your exim.conf file (but you'd need installation support from somewhere).

    +1 951 643-5345
    Third-Party DirectAdmin administration and support
    Dedicated Servers, Dedicated Reseller Accounts
    NoBaloney Internet Services div. Qnito Incorporated
    848 North Rainbow Blvd., Suite #3789
    Las Vegas, NV 89107-1103

Similar Threads

  1. Define which file extensions are editable in file manager
    By sitestreet in forum Feedback & Feature Requests
    Replies: 11
    Last Post: 08-20-2008, 10:01 PM
  2. Re-installing frontpage extensions kills htaccess file?
    By BlueNoteWeb in forum User-Level Difficulties
    Replies: 3
    Last Post: 01-05-2008, 07:48 PM
  3. How to enable 'magic' file extensions?
    By nemonoman in forum Apache (WWW)
    Replies: 5
    Last Post: 04-18-2007, 03:13 PM
  4. DA Editor to allow more file extensions
    By kenlyle in forum Feedback & Feature Requests
    Replies: 0
    Last Post: 10-11-2006, 07:23 AM
  5. Exim Blocking of Extensions
    By boonchuan in forum E-Mail
    Replies: 5
    Last Post: 01-29-2006, 04:45 PM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts