Filename

[Julian Field]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


On 21 Jul 2005, at 14:11, Rick Cooper wrote:

>> -----Original Message-----
>> From: MailScanner mailing list [mailto:MAILSCANNER at JISCMAIL.AC.UK]On
>> Behalf Of Uwe
>> Sent: Thursday, July 21, 2005 1:14 AM
>> To: MAILSCANNER at JISCMAIL.AC.UK
>> Subject: Filename
>>
>>
>> Hello,
>>
>> i have set up filename.types.rules :
>>
>> # Deny all other double file extensions. This catches any hidden
>> filenames.
>> deny    \.[a-z][a-z0-9]{2,3}\s*\.[a-z0-9]{3}$   Found possible
>> filename hiding
>> deny    \pdf$.\exe$                             Not allow
>>
>>
>
> just using
>
> deny \.exe$
>
> should catch this as the end is .exe, to catch both would be "\.pdf 
> \.exe$"
> .the \ tells the regex engine to treat the next character as a literal
> rather than special, in this case "." would normally mean any single
> character.
>
> However, the default rules will catch \.exe$ so it would seem there is
> something else amiss here. Are you getting any errors in the log  
> stating the
> file format is wrong for your file name rules (like not  
> delimitating with a
> tab char?)
>
> Rick

You need 4 fields per line, not 3.

>
>>
>> But i received a File like "Rechnung.pdf.exe" ....
>>
>>
>> # /opt/MailScanner/bin/MailScanner -v
>>
>> This is MailScanner version 4.42.9
>> Module versions are:
>> 1.15    Archive::Zip
>> 1.119   Convert::BinHex
>> 1.03    Fcntl
>> 2.6     File::Basename
>> 2.03    File::Copy
>> 2.00    FileHandle
>> 1.0404  File::Path
>> 0.14    File::Temp
>> 1.29    HTML::Entities
>> 3.45    HTML::Parser
>> 2.30    HTML::TokeParser
>> 1.20    IO
>> 1.08    IO::File
>> 1.121   IO::Pipe
>> 1.66    Mail::Header
>> 3.05    MIME::Base64
>> 5.417   MIME::Decoder
>> 5.417   MIME::Decoder::UU
>> 5.417   MIME::Head
>> 5.417   MIME::Parser
>> 3.03    MIME::QuotedPrint
>> 5.417   MIME::Tools
>> 0.10    Net::CIDR
>> 1.03    POSIX
>> 1.72    Socket
>> 0.01    Sys::Syslog
>> 1.01    Time::localtime
>>
>> Optional module versions are:
>> 1.811   DB_File
>> 1.05    Digest
>> 1.01    Digest::HMAC
>> 2.33    Digest::MD5
>> 2.10    Digest::SHA1
>> 0.44    Inline
>> 0.17    Mail::ClamAV
>> 3.000004        Mail::SpamAssassin
>> 1.997   Mail::SPF::Query
>> 0.15    Net::CIDR::Lite
>> 0.48    Net::DNS
>> missing Net::LDAP
>> 1.94    Parse::RecDescent
>> 0.30    SAVI
>> 1.2     Sys::Hostname::Long
>> 1.1604  Test::Harness
>> 0.44    Test::Simple
>> 1.95    Text::Balanced
>> 1.35    URI
>>
>>
>> Whats wrong ?
>>
>> ------------------------ MailScanner list ------------------------
>> To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
>> 'leave mailscanner' in the body of the email.
>> Before posting, read the Wiki (http://wiki.mailscanner.info/) and
>> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>>
>> Support MailScanner development - buy the book off the website!
>>
>> --
>> This message has been scanned for viruses and
>> dangerous content by MailScanner, and is
>> believed to be clean.
>>
>>
>>
>
>
> --
> This message has been scanned for viruses and
> dangerous content by MailScanner, and is
> believed to be clean.
>
> ------------------------ MailScanner list ------------------------
> To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
> 'leave mailscanner' in the body of the email.
> Before posting, read the Wiki (http://wiki.mailscanner.info/) and
> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>
> Support MailScanner development - buy the book off the website!
>

- -- 
Julian Field
www.MailScanner.info
Buy the MailScanner book at www.MailScanner.info/store
PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654


-----BEGIN PGP SIGNATURE-----
Version: PGP Desktop 9.0.1 (Build 2185)

iQA/AwUBQt+5iRH2WUcUFbZUEQJ4lQCfVIc6R2+4YUpmX4yrUrxA9myNwp4An1Lu
aNMQ9OPRv7Pfv1IyyAEESuaq
=0Aem
-----END PGP SIGNATURE-----

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the Wiki (http://wiki.mailscanner.info/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!