Virus: Zip.ExceededFileSize

Hallo und Guten Abend AMaViS-user,

I get with the receive of a zip file with password
protection the
following message/notify (as recipient):

blah blah
.. Virus: Zip.ExceededFileSize
blu bla

and the e-mail gets to the folder quarantine.

The same file without password protection nothing happens
and
it`s delivered normally.

why is that thus? I think, this must be *UNCHECKED*!?

Amavis 2.4.0 and Postfix 2.3.*


-- 
Viele Gruesse, Kind regards,
 Jim Knuth
 jkjkart.de
 ICQ #277289867
----------
Zufalls-Zitat
----------
Bergziegen in Montana stoßen im Kampf oftmals so heftig die 
Köpfe aneinander, daß ihnen sogar die Hufe abfallen.
----------
Der Text hat nichts mit dem Empfaenger der Mail zu tun
----------
Virus free. Checked by NOD32 Version 1.1483 Build 7061 
11.04.2006



-------------------------------------------------------
This SF.Net email is sponsored by xPML, a groundbreaking
scripting language
that extends applications into web and mobile media. Attend
the live webcast
and join the prime developer group breaking into this new
coding territory!
http:
//sel.as-us.falkag.net/sel?cmd=lnk&kid0944&bid$
1720&dat1642
_______________________________________________
AMaViS-user mailing list
AMaViS-userlists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user

AMaViS-FAQ:http://www.amav
is.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/ho
wto/

Jim,

> I get with the receive of a zip file with password
protection the
> following message/notify (as recipient):
>
> blah blah
> .. Virus: Zip.ExceededFileSize
> blu bla
> and the e-mail gets to the folder quarantine.

A google search on ClamAV and Zip.ExceededFileSize reveals:

> > 0.80-7). Today I received a blocked intimation
with a virus name
> > Zip.ExceededFileSize? The attachment size is less
than 1 MB. I am
> > appending my clamd.conf with this mail. Can some
one enlighten me as
> > to what caused this? ...
>
> Disable ArchiveBlockMax, it's a paranoid security
option.

So it doesn't look like a password protected zip.
 
> The same file without password protection nothing
happens and
> it`s delivered normally.
>
> why is that thus? I think, this must be *UNCHECKED*!?
> Amavis 2.4.0 and Postfix 2.3.*

I tried to send myself a password protected zip,
and it does produce a *UNCHECKED* in subject
(or a defanged mail, if enabled).

  Mark




-------------------------------------------------------
Using Tomcat but need to do more? Need to support web
services, security?
Get stuff done quickly with pre-integrated technology to
make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on
Apache Geronimo
http://sel.as-us.falkag.net/
sel?cmd=lnk&kid=120709&bid=263057&dat=121642
_______________________________________________
AMaViS-user mailing list
AMaViS-userlists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user

AMaViS-FAQ:http://www.amav
is.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/ho
wto/

Jim,

> I get with the receive of a zip file with password
protection the
> following message/notify (as recipient):
>
> blah blah
> .. Virus: Zip.ExceededFileSize
> blu bla
> and the e-mail gets to the folder quarantine.

A google search on ClamAV and Zip.ExceededFileSize reveals:

> > 0.80-7). Today I received a blocked intimation
with a virus name
> > Zip.ExceededFileSize? The attachment size is less
than 1 MB. I am
> > appending my clamd.conf with this mail. Can some
one enlighten me as
> > to what caused this? ...
>
> Disable ArchiveBlockMax, it's a paranoid security
option.

So it doesn't look like a password protected zip.
 
> The same file without password protection nothing
happens and
> it`s delivered normally.
>
> why is that thus? I think, this must be *UNCHECKED*!?
> Amavis 2.4.0 and Postfix 2.3.*

I tried to send myself a password protected zip,
and it does produce a *UNCHECKED* in subject
(or a defanged mail, if enabled).

  Mark




-------------------------------------------------------
Using Tomcat but need to do more? Need to support web
services, security?
Get stuff done quickly with pre-integrated technology to
make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on
Apache Geronimo
http://sel.as-us.falkag.net/
sel?cmd=lnk&kid=120709&bid=263057&dat=121642
_______________________________________________
AMaViS-user mailing list
AMaViS-userlists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user

AMaViS-FAQ:http://www.amav
is.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/ho
wto/