From: Ralf Hildebrandt (Ralf.Hildebrandtcharite.de)
Date: Tue Nov 03 2009 - 08:32:13 CST

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

* Stan Hoeppner <stanhardwarefreak.com>:

> Anyone have a filter they'd like to share that rejects mail at smtp
> based on known malicious attachment file types?

Of course .)

mime_header_checks:

/name=\"(.*)\.(386|bat|chm|cpl|cmd|com|do|exe|hta|jse|lnk|msi|ole)\"$/
   REJECT Unwanted attachment/Unerwuenschter Anhang $1.$2 -- http://webmail.charite.de/doku/faq/#3

/name=\"(.*)\.(pif|reg|rm|scr|shb|shm|shs|sys|vbe|vbs|vxd|xl|xsl)\"$/
   REJECT Unwanted attachment/Unerwuenschter Anhang $1.$2 -- http://webmail.charite.de/doku/faq/#3

--
Ralf Hildebrandt
  Geschäftsbereich IT | Abteilung Netzwerk
  Charité - Universitätsmedizin Berlin
  Campus Benjamin Franklin
  Hindenburgdamm 30 | D-12203 Berlin
  Tel. +49 30 450 570 155 | Fax: +49 30 450 570 962
  ralf.hildebrandtcharite.de | http://www.charite.de
            

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]