OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Can't get MIME header checks to work

From: Amol Hatwar (amolhatwar.org)
Date: Wed Mar 08 2006 - 22:13:54 CST


Hi,

Any reason why a mime_header_checks won't work on a PCRE map? I have the
following line in main.cf

mime_header_checks = pcre:/etc/postfix/mime_header_checks

The mime_header_checks file looks like this:
----
# Files blocked by their extensions (for people who use Windoze)
/name=\"(.*)\.(386|bat|bin|chm|cmd|com|do|exe|hta|jse|lnk|msi|ole)\"$/
  REJECT Possible malicious attachment $1.$2
/name=\"(.*)\.(pif|reg|rm|scr|shb|shm|shs|sys|vbe|vbs|vxd|xl|xsl)\"$/
  REJECT Possible malicious attachment $1.$2
----

postconf -m does show a listing for PCRE maps, still a .pif file as a
plain passes through.

What am I doing wrong here?

Regards,

ah