oversized Zip?

Discussion in 'Installation/Configuration' started by jmroth, Nov 21, 2006.

  1. jmroth

    jmroth ISPConfig Developer ISPConfig Developer

    Hi there,
    clamassassin as it comes with ISPConfig keeps rejecting mails on my system. Now I found out why:

    Code:
    X-Virus-Status: Yes
    X-Virus-Report: Oversized.Zip FOUND 
    This is a joke right? :eek:
     
  2. till

    till Super Moderator Staff Member ISPConfig Developer

    This error normally means that the mail contained a .zip file which will result in a file with nearly endless size beacuse the .zip header was modified to crash the server. These malformed .zip files are only some bytes in size but will use terabytes of disk space when you decompress them.
     
  3. jmroth

    jmroth ISPConfig Developer ISPConfig Developer

    Ah, interesting. Thanks for the info... Well this file was not evil, because I was there when it was created. I also sent it to a web.de account to be checked, also my local (sophos) antivir reported no virii. Maybe my colleague's zip tool is bad.

    Also what I noticed while checking my setup was that freshclam was still running but didn't update anything since Oct. 15, for whatever reason. Restarting it, which updated the signatures at least, did nevertheless not help either.

    I guess I will no longer just delete virus mails :rolleyes:
     
  4. till

    till Super Moderator Staff Member ISPConfig Developer

Share This Page