Allowing specific executable files

[Julian Field]

<x-flowed>
At 20:40 27/09/2004, you wrote:
>I configured MailScanner in my server to deny all the executable files.
>However, there are 2 specific executable files those are send and received
>between our client and us.
>My question is: Is it possible in MailScanner to allow only these 2 specific
>executable files and to continue denying all the others?

If you are denying executables by content with the filetype.rules.conf,
then the only way you can allow these two is to write "magic" (see man
magic) detection patterns for them so that the file command reports them as
special file types. Then you can add "allow" rules to filetype.rules.conf
that lets through these 2 executables.

You basically just need to find special strings in the two programs. Does
the application name appear at some particular offset into the file?
--
Julian Field
www.MailScanner.info
Professional Support Services at www.MailScanner.biz
MailScanner thanks transtec Computers for their support
Buy the MailScanner book at www.MailScanner.info/store

PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
</x-flowed>