From: Virus Guy <Virus@Guy.C0M>

I recently tried to send someone @ gmail a rar file as an attachment.
The file was about 10k. It's a small (about 50 kb) xml file. I used
winrar (offhand not sure what version I've got - there's no intuitive
way to see the version). I used the password option and also encrypted
the file name.

Gmail said this:

============
Your message was rejected by gmail-smtp-in.l.google.com for the
following reason:

5.7.0 This message was blocked because its content presents a potential
5.7.0 security issue. Please visit
5.7.0 https://support.google.com/mail/?p=BlockedMessage to review our
5.7.0 message content and attachment content guidelines.
=============

So either

(a) gmail doesn't like password-protected rar files, or

(b) gmail does real-time file-cracking and looked inside the archive and discovered an xml file and it has a policy of rejecting xml files as attachments.

Comments?
--- NewsGate v1.0 gamma 2
* Origin: News Gate @ Net396 -Huntsville, AL - USA (1:396/4)

From: Shadow <Sh@dow.br>

On Tue, 25 Sep 2018 20:00:52 -0400, Virus Guy <Virus@Guy.C0M> wrote:

I recently tried to send someone @ gmail a rar file as an attachment.
The file was about 10k. It's a small (about 50 kb) xml file. I used
winrar (offhand not sure what version I've got - there's no intuitive
way to see the version). I used the password option and also encrypted
the file name.

Gmail said this:

============
Your message was rejected by gmail-smtp-in.l.google.com for the
following reason:

5.7.0 This message was blocked because its content presents a potential
5.7.0 security issue. Please visit
5.7.0 https://support.google.com/mail/?p=BlockedMessage to review our
5.7.0 message content and attachment content guidelines.
=============

So either

(a) gmail doesn't like password-protected rar files

It won't allow ANY password protected files (where it can't
see the name/size of each file) and it couldn't care less about your
security. It will allow unencrypted malware through, stuff with
multiple hits on Virustotal..
[]'s
--
Don't be evil - Google 2004
We have a new policy - Google 2012
--- NewsGate v1.0 gamma 2
* Origin: News Gate @ Net396 -Huntsville, AL - USA (1:396/4)

From: Virus Guy <Virus@Guy.C0M>

Shadow wrote:

So either

(a) gmail doesn't like password-protected rar files

It won't allow ANY password protected files (where it can't
see the name/size of each file) and it couldn't care less about your security. It will allow unencrypted malware through, stuff with
multiple hits on Virustotal..

I used a hex editor on the rar file and changed the first 2 bytes.
Renamed the file from .rar to something else. Resent the file as
attachment - and this time it went through. The recipient restored the
first 2 bytes and unpacked the file normally.

--- NewsGate v1.0 gamma 2
* Origin: News Gate @ Net396 -Huntsville, AL - USA (1:396/4)

From: RayLopez99 <raylopez88@gmail.com>

On Thursday, September 27, 2018 at 7:35:08 AM UTC+8, Virus Guy wrote:

Shadow wrote:

So either

(a) gmail doesn't like password-protected rar files

It won't allow ANY password protected files (where it can't
see the name/size of each file) and it couldn't care less about your security. It will allow unencrypted malware through, stuff with
multiple hits on Virustotal..

I used a hex editor on the rar file and changed the first 2 bytes.
Renamed the file from .rar to something else. Resent the file as
attachment - and this time it went through. The recipient restored the first 2 bytes and unpacked the file normally.

You can rename the extension of a password protected file sent to Gmail and it works to receive the file.

For a password protected file: MyFile.rar change to to MyFile.rar.ZYX will work.

RL
--- NewsGate v1.0 gamma 2
* Origin: News Gate @ Net396 -Huntsville, AL - USA (1:396/4)

From: Shadow <Sh@dow.br>

On Wed, 10 Oct 2018 01:45:22 -0700 (PDT), RayLopez99
<raylopez88@gmail.com> wrote:

On Thursday, September 27, 2018 at 7:35:08 AM UTC+8, Virus Guy wrote:

Shadow wrote:

So either

(a) gmail doesn't like password-protected rar files

It won't allow ANY password protected files (where it can't
see the name/size of each file) and it couldn't care less about your
security. It will allow unencrypted malware through, stuff with
multiple hits on Virustotal..

I used a hex editor on the rar file and changed the first 2 bytes.
Renamed the file from .rar to something else. Resent the file as
attachment - and this time it went through. The recipient restored the
first 2 bytes and unpacked the file normally.

You can rename the extension of a password protected file sent to Gmail and it

works to receive the file.

For a password protected file: MyFile.rar change to to MyFile.rar.ZYX will work.

Good to know.
TY
Z-Zip will open files with unknown extensions by content, so
will offer to open MyFile.rar.ZYX or MyFile.rar.aaa on a right click.
But not MyFile.rar.txt or MyFile.rar.wav.
Winrar uses extensions, so no option to open the file.
Google's AI must be braindead.
[]'s
--
Don't be evil - Google 2004
We have a new policy - Google 2012
--- NewsGate v1.0 gamma 2
* Origin: News Gate @ Net396 -Huntsville, AL - USA (1:396/4)

From: "Apd" <not@all.invalid>

"Shadow" wrote:

Z-Zip will open files with unknown extensions by content

So will 7-Zip. Never heard of Z-Zip.


--- NewsGate v1.0 gamma 2
* Origin: News Gate @ Net396 -Huntsville, AL - USA (1:396/4)

From: Shadow <Sh@dow.br>

On Thu, 11 Oct 2018 17:05:13 +0100, "Apd" <not@all.invalid> wrote:

"Shadow" wrote:

Z-Zip will open files with unknown extensions by content

So will 7-Zip. Never heard of Z-Zip.

Wrote it myself in secret.
;)
Sorry, typo ...
[]'s

--
Don't be evil - Google 2004
We have a new policy - Google 2012
--- NewsGate v1.0 gamma 2
* Origin: News Gate @ Net396 -Huntsville, AL - USA (1:396/4)