Allow multiple filename extensions?

[Tom Combs]

Hello,

  I'm not clear on the need for denying multiple filename extensions.
  It seems if an attachment contained a virus, it would be checked by
  the virus scanner and either caught or cleared regardless of the
  extension.  Does having multiply filename extensions somehow
  circumvent this process?

  I'm considering dropping this ruleset:

deny    \.[a-z][a-z0-9]{2,3}\s*\.[a-z0-9]{3}$   Found possible filename hiding
                        Attempt to hide real filename extension


  Is this a mistake?

  Thanks for the help!    --Tom Combs


--
Tom Combs                                      E-mail: combs at magnet.fsu.edu
National High Magnetic Field Laboratory        Phone:  (850) 644-1657
1800 E. Paul Dirac Drive                       Tallahassee, FL 32310