.js and hidden filename blocked

Jeff Mills Jeff.Mills at sydneytech.com.au
Tue Sep 7 07:23:19 IST 2010



From: mailscanner-bounces at lists.mailscanner.info [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of Neil Wilson
Sent: Tuesday, 7 September 2010 4:03 PM
To: MailScanner discussion
Subject: .js and hidden filename blocked


No matter what, .js files are blocked as well as double extensions, and I've double checked that all whitespaces are tabs, although they won't show here.

If anyone has any ideas I'd be mist grateful for any assistance.

Thank you.

Regards.

Neil.







Neil,
My config suggests that the jscript rule looks like this:
deny    \.jse?$         Possible Microsoft JScript attack                                               JScript Scripts are dangerous in email

Does that rule still exist in your filename rules?

With the double filename hiding, I commented out the rule rather than using "allow", and that seems to work for me.


Jeff

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20100907/aa39cf5d/attachment.html


More information about the MailScanner mailing list