Blocked bmp files (buffer overflow) anyone?

[Julian Field]

    [ The following text is in the "ISO-8859-1" character set. ]
    [ Your display is set for the "US-ASCII" character set.  ]
    [ Some characters may be displayed incorrectly. ]

Jim Holland wrote:

>Hi Julian
>
>On Thu, 5 May 2005, Julian Field wrote:
>
>
>>This is from a Microsoft vulnerability a few months back. Most machines
>>of course should have the patch installed by now, but I bet they haven't.
>>
>>I blocked *.bmp files for quite a while. But I dropped that block recently.
>>
>>
>
>Can we assume that if any dangerous bmp files arrive they will be detected
>by say ClamAV?  I find bmp files pretty annoying due to their size but our
>system receives quite a few that our members do want to have delivered to
>their mailboxes.
>
>
Fair enough. I have re-enabled it in the default version of the
filename.rules.conf file I ship.
Please feel free to edit this file yourself, after which it won't get
over-written with new ones when you upgrade. It's only intended as an
example file containing some sensible default rules from which you can
set up your own filename rules.

--
Julian Field
www.MailScanner.info
Buy the MailScanner book at www.MailScanner.info/store
Professional Support Services at www.MailScanner.biz
MailScanner thanks transtec Computers for their support

PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the Wiki (http://wiki.mailscanner.info/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!