Mailinglist Archive: opensuse-security (757 mails)

< Previous Next >
Re: [suse-security] Problem with IMAP2 and body_check
  • From: Peer-Joachim Koch <pkoch@xxxxxxxxxxxxxxx>
  • Date: Tue, 08 Jan 2002 08:30:53 +0100
  • Message-id: <6390000.1010475053@vibra>
Hi,

--On Montag, Januar 07, 2002 12:25:49 +0100 Sven Michels <smichels@xxxxxxxxxxxx> wrote:
Peer-Joachim Koch wrote:

Hi,
.....
# cat attach_filter
/^begin [0-9]+ .*\.(dll|pif|vb|vbe|vbs|exe|com|bat|lnk)/ REJECT

maybe, your attachments are not encoded, try to add:
/^(.*)name\=\"(.*)\.(hta|com|pif|vbs|vbe|js|jse|exe|bat|cmd|vxd|scr|shm|e
ml|hlp|spl|swf|shb|vba|dll|reg|ocx|wsf|wsh|lnk)\"$/ REJECT

and don't forget to reload ;)

I tried it - without success. Using a WEB-Mailer I can still send exe-files :(
I have added the test mail:
----------------------------------------
X-Sieve: cmu-sieve 2.0
Return-Path: <pkoch@xxxxxxx>
Received: from localhost (localhost [127.0.0.1])
by delta.bgc-jena.mpg.de (Postfix on MPI for Biogeochemistry) with ESMTP id E98312D23D
for <pkoch@xxxxxxxxxxxxxxx>; Tue, 8 Jan 2002 08:25:34 +0100 (CET)
Received: from delta.bgc-jena.mpg.de (localhost [127.0.0.1])
by localhost (AvMailGate-6.11.0.3) id 20613-5450CFE0;
Tue, 08 Jan 2002 08:25:34 +0100
Received: from mailer.gwdg.de (mailer.gwdg.de [134.76.10.26])
by delta.bgc-jena.mpg.de (Postfix on MPI for Biogeochemistry) with ESMTP id 72FA22CEA8
for <pkoch@xxxxxxxxxxxxxxx>; Tue, 8 Jan 2002 08:25:34 +0100 (CET)
Received: from localhost ([127.0.0.1] helo=0)
by mailer.gwdg.de with esmtp (Exim 3.33 #8)
id 16NqdZ-0004BS-00
for pkoch@xxxxxxxxxxxxxxx; Tue, 08 Jan 2002 08:25:33 +0100
Content-Type: multipart/mixed;boundary="'ThIs-RaNdOm-StRiNg-/=_.639734355:"
Content-Transfer-Encoding: 8bit
X-Originating-IP: pkoch[141.5.16.237]
User-Agent: IMHO/0.98.2 (Webmail for Roxen)
Subject: test
From: Peer-Joachim Koch <pkoch@xxxxxxx>
Date: Tue, 08 Jan 2002 08:25:33 +0100
To: pkoch@xxxxxxxxxxxxxxx
MIME-Version: 1.0
Message-Id: <E16NqdZ-0004BS-00@xxxxxxxxxxxxxx>
X-AntiVirus: OK (checked by AntiVir Version 6.11.0.12)


--'ThIs-RaNdOm-StRiNg-/=_.639734355:
Content-Type: text/plain; charset=iso-8859-1
MIME-Version: 1.0
Content-Length: 2
Content-Transfer-Encoding: 8bit

tt
--'ThIs-RaNdOm-StRiNg-/=_.639734355:
Content-Type: application/octet-stream;name=nshc.exe
Content-Disposition: attachment;filename=nshc.exe
MIME-Version: 1.0
Content-Length: 280364
Content-Transfer-Encoding: base64

----------------------------------------
Using mozilla everything is blocked. But it makes not sense,
if some mails can pass a filter ....


Mit freundlichem Gruss
Peer-Joachim Koch
_________________________________________________________
Max-Planck-Institut fuer Biogeochemie
Dr. Peer-Joachim Koch
Carl-Zeiss-Promenade 10 Telefon: ++49 3641 6437-52
D-07745 Jena Telefax: ++49 3641 6437-10
< Previous Next >