Mailinglist Archive: opensuse-security (605 mails)

< Previous Next >
Re: [suse-security] postfix regexp in body_checks
  • From: "Kurt Seifried" <listuser@xxxxxxxxxxxx>
  • Date: Thu, 4 Oct 2001 16:07:23 -0600
  • Message-id: <003501c14d20$f2930c60$6400030a@xxxxxxxxxxxx>
body_checks = regexp:/etc/postfix/body-checks

#
#.386 Windows 386 enhanced mode driver
#
/name=".*\.386"/ REJECT

and so on. it's poor regex (overly matching) but I'm not to worried.

Kurt Seifried, kurt@xxxxxxxxxxxx
A15B BEE5 B391 B9AD B0EF
AEB0 AD63 0B4E AD56 E574
http://www.seifried.org/security/



----- Original Message -----
From: "Philipp Snizek" <mailinglists@xxxxxxxxx>
To: <suse-security@xxxxxxxx>
Sent: Thursday, October 04, 2001 1:45 PM
Subject: [suse-security] postfix regexp in body_checks


> Hi,
>
> I hope I hit the right list with my request. I'm trying to set up a filter
for postfix to filter
> malicious stuff like all windows executables. For MIME encoded headers I
had no problem, this works
> fine. But if the header is uuencode, the attachment is only visible in the
e-mail's body. I tried a
> regexp like /.*\.(bat|exe|cmd|vbs|vba)/ REJECT in /etc/postfix/body_checks
which should filter all
> *.bat|and so on. But nothing at all happens. Mails go thru as if there
wasn't an obstacle.
>
> If there is some postfix & regexp pro on this list, please tell me what I
am doing wrong.
>
> Thanx,
> Philipp
>
>
>
> --
> To unsubscribe, e-mail: suse-security-unsubscribe@xxxxxxxx
> For additional commands, e-mail: suse-security-help@xxxxxxxx
>


< Previous Next >
Follow Ups
References