Re: [Assp-user] Executale Blocking

[Micheal E. Jr <mi...@es...>]

.zip files are safe because they are currently not known to contain 
executable code.  This however has nothing to do with their potential 
contents.

One thing .zip's affords you above all else is a layer of protection 
against impulse file opening/execution - which is what most file-based 
Trojan viruses depend on.  .zip's themselves are typically benign or are 
unable to execute code on systems running reasonably current versions of 
operating systems or with applications required to read or open the files.

This is a common interpretation of archive files, which is why it is 
termed as "generally considered safe".  Of course, with all things in 
life, this does not apply to all opinions or circumstance - and you will 
be required to make your own best judgment depending on your environment 
and security requirements.


Chr...@bi... wrote:
> Hello List,
>
> I have a question about Attachments and Viruses section (ASSP
> v1.3.3.8())
>
> if I set DoBlockExes to 0, are BlockExes, BlockWLExes, BlockNPExes
> ignored?
> if I set DoBlockExes to 1 and BlockExes to 0, are  BlockWLExes,
> BlockNPExes ignored?
>
> I ask because I cannot find an explicit description in the wiki, and the
> original documentation looks nothing like my ASSP configuration page. 
>
> Also, the wiki says that .zip files are "generally considered safe".
> When did that happen?  Sureley .zip should be blocked beaciuse av
> scanners can't see inside them?
>
> If my question is stupid just chuckle to yourself and move on.
>
> Thanks - Chris
>
>
> -------------------------------------------------------------------------
> Check out the new SourceForge.net Marketplace.
> It's the best place to buy or sell services for
> just about anything Open Source.
> http://sourceforge.net/services/buy/index.php
> _______________________________________________
> Assp-user mailing list
> Ass...@li...
> https://lists.sourceforge.net/lists/listinfo/assp-user
>
>