Hello All,

I have an inbound email that is being rejected due to SF thinking it is a password protected archive, however the attached ZIP is not password protected (or at least it doesnt ask for a password when it is opened?):

05/03/06 12:14:51:910 -- (9532) Connection from: x.x.x.x  -  Originating country : United Kingdom
05/03/06 12:14:52:097 -- (9532) Bypassed all rules for: dave@recipient.co.uk from david.chilten@sender.co.uk ( Whitelisted Peer IP)
05/03/06 12:14:52:113 -- (9532) Bypassed all rules for: david.chilten@recipient.co.uk from david.chilten@sender.co.uk ( Whitelisted Peer IP)
05/03/06 12:14:52:363 -- (9532) EMail from david.chilten@sender.co.uk to dave@recipient.co.uk, david.chilten@sender.co.uk infected with the virus Password protected archive - potential virus
05/03/06 12:14:52:441 -- (9532) Disconnect

I'll try to email you a copy of the email in question. Do you have any idea why this maybe?

Regards,
Lyndon.

Marco is correct. The zip was created with a new tool, and that created extraction problems. We've obtained an update from Norman, it's a new ncl.dll file. We can make it available upon request, while we work on creating a new patch for SpamFilter that will retrieve the updated file automatically. 

FYI - build 560 is now available in the registered user area. It automatically downloads the updated ncl.dll (Norman Compression Library) whenever a new one is available (as is the case now...).