OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
mime & body smtp filtering image attachments

From: Adam D (emlistsgmail.com)
Date: Tue Dec 12 2006 - 14:30:12 CST


I have been working hard for a server to block all image attachments esp. the gif with all the pump and dump scams/spam. However every smtp rule I create they still make it through the door. Is it because the embed attached gif is in 64 bit format and postfix can not do anything in the 64 bit?

        part of message...

        ------=_NextPart_001_0005_01C71D7E.35A6D800--

        ------=_NextPart_000_0004_01C71D7E.35A6D800
        Content-Type: image/gif;
                name="management.gif"
        Content-Transfer-Encoding: base64
        Content-ID: <000301c71d3b$27839800$00000000hkzjze1tfbdrxy>

I have been creating rules in the mime and header files to block accepting gifs but they still get through.

sample of mime_header_checks

#### Image attachements
/name=\"(.*)\.(gif|xcf|pix|matte|mask|alpha|als|fli|flc|dcm|dicom|eps|fit|fits|gif|gbr|gih|xjt|xjtgz|xjbz2|pat|html|htm|jpg|jpeg|jpe|cel|mng|ico|pgm|png|ppm|psd|ps|shp|im1|im8|im24|im32|rs|ras|sgi|rgb|bw|icon|tif|tiff|tga|bmp|xbm|icon|bitmap|xpm|xwd|pcx|pcc)\"$/
                REJECT Image attachements not allowed

sample of body_checks

/name=\"(.*)\.(gif|xcf|pix|matte|mask|alpha|als|fli|flc|dcm|dicom|eps|fit|fits|gif|gbr|gih|xjt|xjtgz|xjbz2|pat|html|htm|jpg|jpeg|jpe|cel|mng|ico|pgm|png|ppm|psd|ps|shp|im1|im8|im24|im32|rs|ras|sgi|rgb|bw|icon|tif|tiff|tga|bmp|xbm|icon|bitmap|xpm|xwd|pcx|pcc)\"$/
                REJECT Image attachements not allowed

What I am guessing postfix can't filter out the gif because of the base64 as shone above? Thanks for any new input on this.

-Adam