Mailinglist Archive: opensuse-security (605 mails)

< Previous Next >
Re: [suse-security] postfix regexp in body_checks
  • From: Sven Michels <smichels@xxxxxxxxxxxx>
  • Date: Fri, 05 Oct 2001 10:14:28 +0200
  • Message-id: <3BBD6BE4.F3109550@xxxxxxxxxxxx>
Philipp Snizek wrote:
>
> Hi,
>
> I hope I hit the right list with my request. I'm trying to set up a filter for postfix to filter
> malicious stuff like all windows executables. For MIME encoded headers I had no problem, this works
> fine. But if the header is uuencode, the attachment is only visible in the e-mail's body. I tried a
> regexp like /.*\.(bat|exe|cmd|vbs|vba)/ REJECT in /etc/postfix/body_checks which should filter all
> *.bat|and so on. But nothing at all happens. Mails go thru as if there wasn't an obstacle.

i think you should look into the postfix-users archive, its discussed many times
(you know that list ;)

try that one:
/^(.*)name\=\"(.*)\.(com|pif|vbs|vbe|exe|bat|cmd)\"$/ REJECT

add more if you want...


--
intraDAT AG http://www.intradat.com
Wilhelm-Leuschner-Strasse 7 Tel: +49 69-25629-0
D - 60329 Frankfurt am Main Fax: +49 69-25629-256

< Previous Next >
References