Can't Block .js files inside of .zip Email Attachments

[Maurizio Marini]

On Fri, 6 May 2016 15:24:10 +0000
"Kirchner, Patrick" <KirchnerPA at lakeland.edu> wrote:

> An infected .js file in a .zip file that made its way through the email
> server was luckily blocked by antivirus on my wife's Mac, so I'd really like
> to be able to block such files.  I can provide an sample of one of the .js
> files if it would be helpful.

Hello Patrick
I had the same issue, you have to raise log level, then you can check if zip
file is unzipped; js are blocked, but ziped files should be opened
 I solved by installing p7zip
this is not enough, you should configure amavis to use it whan you receive zip
attachments
I used this

unshift(@decoders,
  ['zip',  \&Amavis::Unpackers::do_7zip, ['7z','7za'] ],
);

I am not  an expert at all, I am very lame and I can't say this is the
proper solution, what I note was that after this configuration zipped
attachments were correctly opened

-m
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 5377 bytes
Desc: not available
URL: <http://lists.amavis.org/pipermail/amavis-users/attachments/20160510/0636f961/attachment.bin>