names make no difference - 'file' (or varients) s used to check for executables not just based on name of file. <br><br clear="all">-- <br>Martin Hepworth<br>Oxford, UK<br>
<br><br><div class="gmail_quote">2011/5/13 Beauchemin, Denis <span dir="ltr"><<a href="mailto:Denis.Beauchemin@usherbrooke.ca">Denis.Beauchemin@usherbrooke.ca</a>></span><br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">
I just read something that makes me wonder if MS can detect those Unicode names as executables?<br>
<a href="http://norman.com/security_center/security_center_archive/2011/rtlo_unicode_hole" target="_blank">http://norman.com/security_center/security_center_archive/2011/rtlo_unicode_hole</a><br>
<br>
We’ve been blocking EXE, BAT and many other executables for a long time with MS, just based on the file name. I didn’t want to use the file command because we encouraged people to rename offending attachments before sending them.<br>
<br>
Should I start using the file command just to be on the safe side?<br>
<br>
Thanks!<br>
<br>
Denis<br>
<font color="#888888"><br>
Denis Beauchemin<br>
Architecte Technologique - Section Infrastructure des serveurs<br>
Service des technologies de l’information (S.T.I.)<br>
Université de Sherbrooke<br>
<br>
<br>
</font><br>--<br>
MailScanner mailing list<br>
<a href="mailto:mailscanner@lists.mailscanner.info">mailscanner@lists.mailscanner.info</a><br>
<a href="http://lists.mailscanner.info/mailman/listinfo/mailscanner" target="_blank">http://lists.mailscanner.info/mailman/listinfo/mailscanner</a><br>
<br>
Before posting, read <a href="http://wiki.mailscanner.info/posting" target="_blank">http://wiki.mailscanner.info/posting</a><br>
<br>
Support MailScanner development - buy the book off the website!<br>
<br></blockquote></div><br>