Mailinglist Archive: opensuse-security (757 mails)

< Previous Next >
Re: [suse-security] Problem with IMAP2 and body_check
  • From: Sven Michels <smichels@xxxxxxxxxxxx>
  • Date: Tue, 08 Jan 2002 11:25:31 +0100
  • Message-id: <3C3AC91B.756A815F@xxxxxxxxxxxx>
Peer-Joachim Koch wrote:

> > maybe, your attachments are not encoded, try to add:
> > /^(.*)name\=\"(.*)\.(hta|com|pif|vbs|vbe|js|jse|exe|bat|cmd|vxd|scr|shm|e
> > ml|hlp|spl|swf|shb|vba|dll|reg|ocx|wsf|wsh|lnk)\"$/ REJECT
> >
> > and don't forget to reload ;)
>
> I tried it - without success. Using a WEB-Mailer I can still send exe-files
> :(

> --'ThIs-RaNdOm-StRiNg-/=_.639734355:
> Content-Type: application/octet-stream;name=nshc.exe
> Content-Disposition: attachment;filename=nshc.exe

take a look:
the regex match name="something.extension"
notice the ".
your can remove them in the regex to let it work or
modify the regex, maybe to "*

HTH


--
intraDAT AG http://www.intradat.com
Wilhelm-Leuschner-Strasse 7 Tel: +49 69-25629-0
D - 60329 Frankfurt am Main Fax: +49 69-25629-256
Junk mail is war. RFCs do not apply.

< Previous Next >