[OT] Strip attachment and add link for download

Derek Winkler dwinkler at algorithmics.com
Tue Jun 20 17:18:42 IST 2006


>
> -------------------------
> Alias /pickup/ "/var/spool/MailScanner/quarantine/"
> <Directory "/var/spool/MailScanner/quarantine/">
>     Options Indexes MultiViews
>     AllowOverride None
>     Order allow,deny
>     Allow from all
> </Directory>
> --------------------------
> 
> The only down side is you have to open up permissions to the quarantine 
> folders, and thus making ALL of the messages available to those that 
> know how to peruse the folders.  Fortunately, the message id is quite 
> long and random, and makes it harder to dig around unless you know 
> exactly what it is.

You should really change this to -Indexes since this allows for directory
indexing. It doesn't matter how messed up the URL is if you allow directory
indexing.

When you go to http://www.whatever.tld/pickups/ doesn't it give you a
directory listing? and the same for all sub-directories?

This email and any files transmitted with it are confidential and
proprietary to Algorithmics Incorporated and its affiliates
("Algorithmics").  If received in error, use is prohibited.  Please destroy,
and notify sender.  Sender does not waive confidentiality or privilege.
Internet communications cannot be guaranteed to be timely, secure, error or
virus-free.  Algorithmics does not accept liability for any errors or
omissions.  Any commitment intended to bind Algorithmics must be reduced to
writing and signed by an authorized signatory.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20060620/6ee82392/attachment.html


More information about the MailScanner mailing list