wrong detection of file?

Alex Neuman alex at vidadigital.com.pa
Tue May 28 15:52:30 UTC 2019


Or the MIME encoding is splitting it... still, periods in the middle of files have been seen as an inconvenience for some time. There's even a rule for "double extensions" since they can be used to trick people into opening them by naming them filename.doc.exe.

> On May 28, 2019, at 5:50 PM, Shawn Iverson via MailScanner <mailscanner at lists.mailscanner.info> wrote:
> 
> Although I agree with you, a file with .com in the middle of it, however, should not match.  I suspect the filename parser in MailScanner is not parsing the filename properly and is perhaps treating spaced elements of the filename as separate strings.
> 
> On Tue, May 28, 2019 at 11:38 AM Peter Farrow <peter.farrow at togethia.net <mailto:peter.farrow at togethia.net>> wrote:
> Dear Louis,
> 
> A file ending in ".com" is a computer code executable program.
> 
> Mailscanner is seeing "example.com <http://example.com/>" and disallowing it as a potential executable.
> 
> This is normal expected and by design behaviour,
> 
> Pete
> 
> 
> <signature.JPG>
> On 28/05/2019 15:43, L.P.H. van Belle via MailScanner wrote:
>> Hai Shawn, 
>> 
>> 
>> Have you ever seen something like this. 
>> 
>> I just e-mailed a file, with a name as shown below. 
>> SSL Server Test hostname.example.com <http://hostname.example.com/> (Powered by Qualys SSL Labs).pdf
>>  
>> The resport shows : 
>> Message: Executable DOS/Windows programs are dangerous in email (SSL Server Tes.com)
>> And its shown in mailwatch as :  application/pdf; charset=binary
>> 
>> Now the thing i dont get here is, how is the name "SSL Server Tes.com" constructed from
>> The name : SSL Server Test hostname.example.com <http://hostname.example.com/> (Powered by Qualys SSL Labs).pdf
>> 
>> I only change the hostname and domain here, i kept the format exact the same.
>> 
>> Greetz, 
>> 
>> Louis
>> 
>> 
>> 
> 
> 
> -- 
> MailScanner mailing list
> mailscanner at lists.mailscanner.info <mailto:mailscanner at lists.mailscanner.info>
> http://lists.mailscanner.info/mailman/listinfo/mailscanner <http://lists.mailscanner.info/mailman/listinfo/mailscanner>
> 
> 
> 
> -- 
> Shawn Iverson, CETL
> Director of Technology
> Rush County Schools
> 765-932-3901 option 7
> iversons at rushville.k12.in.us <mailto:iversons at rushville.k12.in.us>
> 
> 
> 
> -- 
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
> 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20190528/8b31c138/attachment.html>


More information about the MailScanner mailing list