Best practice

Matt Hampton matt at CODERS.CO.UK
Fri Oct 14 01:33:29 IST 2005

    [ The following text is in the "ISO-8859-1" character set. ]
    [ Your display is set for the "US-ASCII" character set.  ]
    [ Some characters may be displayed incorrectly. ]

Scott Silva wrote:

>But wouldn't blocking executables by filetype catch anything that could
>be executable? Even if the filename is obscured?
>The file command is pretty good with dos and windows executables, no
>matter the extension. I usually catch the newer viruses here as their
>signatures are written and distributed through the virus scanner channels.
Still testing the code but I am implementing a safe filename/filetype 
function.  If the file extension ends .pdf (with anything before it) and 
"file" returns that it is a PDF allow it.  At the same time if something 
other than PDF is returned by "file" the attachment is is handled like a 

Once I am happy with the code I'll post it..... (otherwise engaged at 
the moment - my daughter was born two days ago :-) )


------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at with the words:
'leave mailscanner' in the body of the email.
Before posting, read the Wiki ( and
the archives (

Support MailScanner development - buy the book off the website!

More information about the MailScanner mailing list