OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: Header Checks

From: Alex van den Bogaerdt (alexergens.op.het.net)
Date: Fri Sep 05 2003 - 08:52:50 CDT


On Tue, Sep 02, 2003 at 07:04:49PM +0200, Phil Curtis wrote:

> And this is the first line of pcre-header-checks
> /^Content-(Type|Disposition):.*(file)?name
> *=.*\.(com|exe|lnk|bat|scr|chm|hlp|hta|reg|shs|vbe|vbs|wsf|wsh|pif)/
> REJECT Email rejected, an attachment with .${3} extension detected.

A small suggestion to maybe improve resource utilization:

   ".*(file)?name"
and
   ".*name"

seem to do the same to me?

Also, your filter looks like it will block names such as

"name=anything.regular.zip"

cheers,
Alex
--
http://www.googlism.com/index.htm?ism=alex+van+den+bogaerdt&type=1