filename vs. filetype in blocking executables

[Kevin Spicer]

On Tue, 2004-06-08 at 20:01, Peter Bonivart wrote:
> Mailgate IHuff wrote:
> > I don't believe that's the case - I'm using basically the default
> > filename rules configuration.  Every line in the default is
> > syntactically similar to the line I referred to.  Maybe it works both ways?
>
> If there's a deny in either filename or filetype it wins so you have to
> allow executables as filetype and deny all executables but sea-files as
> filenames. That makes you slightly vulnerable to forging though.
>
> Another alternative is to alter your magic file that identifies file
> types and get rid of sea there.

I got round this by patching MailScanner to allow me to specify
exceptions in the filename rules which are applied to the filetype
rules.  In other words, as well as having an allow and a deny option I
added an 'allowtype' option to filename rules which is interpreted as
meaning "If the filename matches this pattern then allow the file even
if it would be blocked by the filetype checking"




BMRB International
http://www.bmrb.co.uk
+44 (0)20 8566 5000
_________________________________________________________________
This message (and any attachment) is intended only for the
recipient and may contain confidential and/or privileged
material.  If you have received this in error, please contact the
sender and delete this message immediately.  Disclosure, copying
or other action taken in respect of this email or in
reliance on it is prohibited.  BMRB International Limited
accepts no liability in relation to any personal emails, or
content of any email which does not directly relate to our
business.

-------------------------- MailScanner list ----------------------
To leave, send    leave mailscanner    to jiscmail at jiscmail.ac.uk
Before posting, please see the Most Asked Questions at
http://www.mailscanner.biz/maq/     and the archives at
http://www.jiscmail.ac.uk/lists/mailscanner.html