.esp files and script blocking

[Peter Bonivart]

<x-flowed>
Dan Farmer wrote:
> I think a better question is why is an eps file (encapsulated
> postscript) considered a script - I'd propose that it might be
> misclassified. Yes, the word script is in the name, but postscript is a
> programming language for describing a printed page, which can be
> rendered to either a postscript printer, or a screen if you have
> ghostscript or another software postscript renderer installed - in my
> eyes its file type should be classified as an image like gif, jpg, or
> pdf (which grew from postscript).

You answered that one yourself, it is a script.

> Maybe I'm forgetting something important about postscript, but I don't
> think I've ever heard of a postscript virus, trojan, exploit, etc. How
> could this possibly be considered dangerous content when compared to
> real scripting languages like shell, perl, javascript, applescript etc.

MS uses the unix file command which in turn uses the magic file to
determine the type of file. It identifies files with no regard to
whether they are dangerous or not. The classification has nothing to do
with MS at all, it's just a way of unix knowing file content without
using file suffixes like lesser OS:es. Maybe you could look at "man
magic" to find out how to make a unique signature for postscript files.

I don't see any reason to block scripts as file types though.

--
/Peter Bonivart

--Unix lovers do it in the Sun

Sun Fire V210, Solaris 9, Sendmail 8.12.10, MailScanner 4.32.5,
SpamAssassin 2.63 + DCC 1.2.50, ClamAV 0.75.1 + GMP 4.1.2, Vispan 1.4

-------------------------- MailScanner list ----------------------
To leave, send    leave mailscanner    to jiscmail at jiscmail.ac.uk
Before posting, please see the Most Asked Questions at
http://www.mailscanner.biz/maq/     and the archives at
http://www.jiscmail.ac.uk/lists/mailscanner.html
</x-flowed>