Filename

[Rick Cooper]

    [ The following text is in the "iso-8859-1" character set. ]
    [ Your display is set for the "US-ASCII" character set.  ]
    [ Some characters may be displayed incorrectly. ]

> -----Original Message-----
> From: MailScanner mailing list [mailto:MAILSCANNER at JISCMAIL.AC.UK]On
> Behalf Of Uwe
> Sent: Thursday, July 21, 2005 1:14 AM
> To: MAILSCANNER at JISCMAIL.AC.UK
> Subject: Filename
>
>
> Hello,
>
> i have set up filename.types.rules :
>
> # Deny all other double file extensions. This catches any hidden
> filenames.
> deny    \.[a-z][a-z0-9]{2,3}\s*\.[a-z0-9]{3}$   Found possible
> filename hiding
> deny    \pdf$.\exe$                             Not allow
>

just using

deny \.exe$

should catch this as the end is .exe, to catch both would be "\.pdf\.exe$"
.the \ tells the regex engine to treat the next character as a literal
rather than special, in this case "." would normally mean any single
character.

However, the default rules will catch \.exe$ so it would seem there is
something else amiss here. Are you getting any errors in the log stating the
file format is wrong for your file name rules (like not delimitating with a
tab char?)

Rick
>
> But i received a File like "Rechnung.pdf.exe" ....
>
>
> # /opt/MailScanner/bin/MailScanner -v
>
> This is MailScanner version 4.42.9
> Module versions are:
> 1.15    Archive::Zip
> 1.119   Convert::BinHex
> 1.03    Fcntl
> 2.6     File::Basename
> 2.03    File::Copy
> 2.00    FileHandle
> 1.0404  File::Path
> 0.14    File::Temp
> 1.29    HTML::Entities
> 3.45    HTML::Parser
> 2.30    HTML::TokeParser
> 1.20    IO
> 1.08    IO::File
> 1.121   IO::Pipe
> 1.66    Mail::Header
> 3.05    MIME::Base64
> 5.417   MIME::Decoder
> 5.417   MIME::Decoder::UU
> 5.417   MIME::Head
> 5.417   MIME::Parser
> 3.03    MIME::QuotedPrint
> 5.417   MIME::Tools
> 0.10    Net::CIDR
> 1.03    POSIX
> 1.72    Socket
> 0.01    Sys::Syslog
> 1.01    Time::localtime
>
> Optional module versions are:
> 1.811   DB_File
> 1.05    Digest
> 1.01    Digest::HMAC
> 2.33    Digest::MD5
> 2.10    Digest::SHA1
> 0.44    Inline
> 0.17    Mail::ClamAV
> 3.000004        Mail::SpamAssassin
> 1.997   Mail::SPF::Query
> 0.15    Net::CIDR::Lite
> 0.48    Net::DNS
> missing Net::LDAP
> 1.94    Parse::RecDescent
> 0.30    SAVI
> 1.2     Sys::Hostname::Long
> 1.1604  Test::Harness
> 0.44    Test::Simple
> 1.95    Text::Balanced
> 1.35    URI
>
>
> Whats wrong ?
>
> ------------------------ MailScanner list ------------------------
> To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
> 'leave mailscanner' in the body of the email.
> Before posting, read the Wiki (http://wiki.mailscanner.info/) and
> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>
> Support MailScanner development - buy the book off the website!
>
> --
> This message has been scanned for viruses and
> dangerous content by MailScanner, and is
> believed to be clean.
>
>


--
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the Wiki (http://wiki.mailscanner.info/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!