List Info

Thread: bypass_decode_parts doesn't work




bypass_decode_parts doesn't work
user name
2006-06-22 13:19:02
hello,

I have a virusscanner integrated into amavis, which is able
to decode
an mail himself. I want to switchoff mail decoding via
amavis.

$bypass_decode_parts = 1;

but the log in loglevel 5 told me, that parts are still
decoded.
My scanner doesnt find maleware in a gif or in an ascii
mailbody
But he find maleware, if I present him the whole mail ...

As an workaround I use now

keep_decoded_original_maps = (new_RE(
  qr'^MAIL$',   # retain full original message for virus
checking (can be slow)
...
));

What can I do to disable partsdecoding completly ?

-- 
Andreas Schulze

DATEV eG, Paumgartner Strasse 6-14, D - 90429 Nürnberg
Abt. Internet- und Securitydienste
 Telefon : +49 911 276 2648
 Telefax : +49 911 276 7892
   Mobil : +49 172 8122883
  E-Mail : andreas.schulze_at_datev.de

Using Tomcat but need to do more? Need to support web
services, security?
Get stuff done quickly with pre-integrated technology to
make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on
Apache Geronimo
http://sel.as-us.falkag.net/
sel?cmd=lnk&kid=120709&bid=263057&dat=121642
_______________________________________________
AMaViS-user mailing list
AMaViS-userlists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user

AMaViS-FAQ:http://www.amav
is.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/ho
wto/
bypass_decode_parts doesn't work
user name
2006-06-22 13:42:33
Andreas,

> I have a virusscanner integrated into amavis, which is
able to decode
> an mail himself. I want to switchoff mail decoding via
amavis.
>   $bypass_decode_parts = 1;
> but the log in loglevel 5 told me, that parts are still
decoded.

> What can I do to disable partsdecoding completly ?

$bypass_decode_parts controls archive and compression
decoders,
i.e. all except the basic MIME decoding.

MIME decoding is always done and can not be disabled
(we need header and it checks MIME structure validity,
also needed for basic 'defanging').

> My scanner doesnt find maleware in a gif or in an ascii
mailbody
> But he find maleware, if I present him the whole mail
...
>
> As an workaround I use now
>
> keep_decoded_original_maps = (new_RE(
>   qr'^MAIL$',   # retain full original message for
virus checking (can be
> slow) ...
> ));

Yes, this is the proper solution. It lets virus scanner see
entire message including header, besides individual MIME
parts.

  Mark

Using Tomcat but need to do more? Need to support web
services, security?
Get stuff done quickly with pre-integrated technology to
make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on
Apache Geronimo
http://sel.as-us.falkag.net/
sel?cmd=lnk&kid=120709&bid=263057&dat=121642
_______________________________________________
AMaViS-user mailing list
AMaViS-userlists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user

AMaViS-FAQ:http://www.amav
is.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/ho
wto/
[1-2]

about | contact  Other archives ( Real Estate discussion Medical topics )