[AccessD] OT: Zip files (was Logic issue)

I totally agree. If you are going to the trouble of scanning zip file
contents it makes no sense at all to rely on the file extensions.

But even my shop's method has a gaping hole. If the zip file has encrypted
files in it the scanner gives up, adds a message to the effect that the file
was not scanned and passes it on to the intended recipient. Not such a good
idea.

Lambert

-----Original Message-----
From: accessd-bounces at databaseadvisors.com
[mailto:accessd-bounces at databaseadvisors.com] On Behalf Of John Bartow
Sent: Thursday, August 25, 2005 3:40 PM
To: 'Access Developers discussion and problem solving'
Subject: RE: [AccessD] OT: Zip files (was Logic issue)


Which is the correct manner of scanning and hence my switch to ftp
instructions, but your shop is ahead of the curve on this. 

-----Original Message-----
From: accessd-bounces at databaseadvisors.com
[mailto:accessd-bounces at databaseadvisors.com] On Behalf Of Heenan, Lambert

But if you try to send a Zip file that contains an EXE file, that will be
blocked. In addition, if you rename the EXE before adding it to the ZIP file
it will *still* get blocked because the scanning s/w looks at the (renamed)
EXE file and sees its signature first few bytes and detects the EXE that
way.

-- 
AccessD mailing list
AccessD at databaseadvisors.com
http://databaseadvisors.com/mailman/listinfo/accessd
Website: http://www.databaseadvisors.com