OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Marcos Agüer (marcosalltrading.es)
Date: Tue Dec 04 2001 - 04:05:06 CST

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    On 2 Dec 2001 04:00:26 +0100
    michaelelleryyahoo.com ("Michael Ellery") wrote:
    > /etc/postfix/body_checks contains only the following (as one line):
    > /^(Content-(Type|Disposition):.*|[[:space:]]*(file)?)name=("[^"]*|[^[:space:
    > ]]*)\.(exe|com|scr|pif|bat|lnk|dll|vbs|js)[[:>:]]/ REJECT

    That regexp will match multiline headers?

    Ones like this:
     
    Content-type: application/octet-stream;
            name="174_01d.pdf"

    What about that one?

    /^(Content-(Type|Disposition):.*|[[:space:]]*(file)?)name=("[^"]*|[^[:space:
    ]]*)\..*{1,4}\.(exe|com|scr|pif|bat|lnk|dll|vbs|js)[[:>:]]/ REJECT

    I want to block those 2-extensions virus attachments.

    Marcos
    -
    To unsubscribe, send mail to majordomopostfix.org with content
    (not subject): unsubscribe postfix-users