Not blocking executables

rob rob at robhq.com
Mon Jan 29 16:25:44 CET 2007


On Mon, 29 Jan 2007 16:05:06 +0100 (CET), Raymond Dijkxhoorn wrote
> Hi!
> 
> > I have this in my filetype.rules.conf
> >
> > allow   text            -                       -
> > allow   \bscript        -                       -
> > allow   archive         -                       -
> > allow   postscript      -                       -
> > deny    self-extract    No self-extracting archives     No self-extracting archives
allowed
> > deny    executable      No executables          No programs allowed
> > deny    ELF             No executables          No programs allowed
> > deny    Registry        No Windows Registry entries     No Windows Registry files
allowed
> >
> > I tried adding
> >
> > deny    .exe$           No exe files            No exe files
> >
> > But a test .exe still came in.  I have a feeling I am doing something stupid.  Maybe the
> > lack of caffeine this monday morning.
> 
> In the default distribution its added also, why not simply use that?
> 
> # These 2 added by popular demand - Very often used by viruses
> deny    \.com$          Windows/DOS Executable                                 
>                          Executable DOS/Windows programs are dangerous in 
> email deny    \.exe$          Windows/DOS Executable                           
>                                Executable DOS/Windows programs are dangerous 
> in email
> 
> Nye,
> Raymond.

I added the lines above, restart MailScanner, and the exe was still delivered.  A
MailScanner --lint does not show any errors.




More information about the MailScanner mailing list