Executable vs Binary

[Jerry Benton]

I get the same results when checking the MIME type. I think what is firing is the binary character set. 

-
Jerry Benton
www.mailborder.com



> On Apr 22, 2015, at 8:59 PM, Shawn Iverson <IversonS at rushville.k12.in.us> wrote:
> 
> I am having trouble getting MS to fire off on the embedded .dat file in the provided .docx file.  
> 
> Using file version 5.11....
> 
> When I run file -i against it, I get the following
> 
> 0000.dat: text/plain; charset=binary
> 
> My archives.filetype.rules.conf has the following:
> 
> deny    executable      No executables          No programs allowed
> 
> 
> 
> 
> 
> On Thu, Apr 16, 2015 at 3:45 PM, Jerry Benton <jerry.benton at mailborder.com <mailto:jerry.benton at mailborder.com>> wrote:
> Has anyone dealt with this? I can’t decide if I should mod the source or just change the configs:
> 
> - Microsoft document comes through with some sort of dat file embedded. While MS see that dat file as text/plain, the character set is binary, so it nails it as an executable.
> - Allowing executables will allow the file.
> 
> So, there’s the rub. Under the current code we have to allow executables for these “newer” types of Microsoft documents to get through. This isn’t restricted to just Microsoft. There are several other file formats that make MailScanner fire on this.
> 
> 
> Ideas?
> 
> -
> Jerry Benton
> www.mailborder.com <http://www.mailborder.com/>
> 
> 
> 
> 
> 
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info <mailto:mailscanner at lists.mailscanner.info>
> http://lists.mailscanner.info/listinfo/mailscanner <http://lists.mailscanner.info/listinfo/mailscanner>
> 
> 
> 
> 
> -- 
> Shawn Iverson
> Director of Technology
> Rush County Schools
> 765-932-3901 x271
> iversons at rushville.k12.in.us <mailto:iversons at rushville.k12.in.us>
> 
> -- 
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/listinfo/mailscanner
> 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20150422/da53ee5d/attachment.html>