filename vs. filetype in blocking executables

Peter Bonivart peter at UCGBOOK.COM
Tue Jun 8 20:01:38 IST 2004


Mailgate IHuff wrote:
> I don't believe that's the case - I'm using basically the default
> filename rules configuration.  Every line in the default is
> syntactically similar to the line I referred to.  Maybe it works both ways?

If there's a deny in either filename or filetype it wins so you have to
allow executables as filetype and deny all executables but sea-files as
filenames. That makes you slightly vulnerable to forging though.

Another alternative is to alter your magic file that identifies file
types and get rid of sea there.

--
/Peter Bonivart

--Unix lovers do it in the Sun

Sun Fire V210, Solaris 9, Sendmail 8.12.10, MailScanner 4.29.7,
SpamAssassin 2.63 + DCC 1.2.45, ClamAV 0.70 + GMP 4.1.2, Vispan 1.4

-------------------------- MailScanner list ----------------------
To leave, send    leave mailscanner    to jiscmail at jiscmail.ac.uk
Before posting, please see the Most Asked Questions at
http://www.mailscanner.biz/maq/     and the archives at
http://www.jiscmail.ac.uk/lists/mailscanner.html



More information about the MailScanner mailing list