.esp files and script blocking

[Dan Farmer]

<x-flowed>
On Aug 6, 2004, at 2:06 PM, Peter Bonivart wrote:

> The attachments will be blocked if they are denied in either
> filename.rules.conf or filetype.rules.conf. You allow the file name but
> deny the file type so there you go. Either you will have to allow
> scripts (it is the default) or you will have to use a ruleset for file
> types.

I think a better question is why is an eps file (encapsulated
postscript) considered a script - I'd propose that it might be
misclassified. Yes, the word script is in the name, but postscript is a
programming language for describing a printed page, which can be
rendered to either a postscript printer, or a screen if you have
ghostscript or another software postscript renderer installed - in my
eyes its file type should be classified as an image like gif, jpg, or
pdf (which grew from postscript).

Maybe I'm forgetting something important about postscript, but I don't
think I've ever heard of a postscript virus, trojan, exploit, etc. How
could this possibly be considered dangerous content when compared to
real scripting languages like shell, perl, javascript, applescript etc.

I see that scripts are allowed by default which is why I've never seen
the issue, but should I ever need to block scripts, I won't be able to
as we can't block digital art submissions from clients...

dan

-------------------------- MailScanner list ----------------------
To leave, send    leave mailscanner    to jiscmail at jiscmail.ac.uk
Before posting, please see the Most Asked Questions at
http://www.mailscanner.biz/maq/     and the archives at
http://www.jiscmail.ac.uk/lists/mailscanner.html
</x-flowed>