Simon B skrev den 2025-02-13 16:27:
On Thu, 13 Feb 2025 at 15:50, Michael Orlitzky <[email protected]>
wrote:
On 2025-02-13 12:08:15, Simon B wrote:
>
> ripole does not exist and is not installable, but checking .doc
> extensions would be nice.
>
> The others I could just add to a list of banned extensions I suppose...
>
Devil's advocate: docx was made the default in 2007, which, against
all intuition, was 18 years ago. There are legal adults who have never
heard of it.
And yet everyone still sends them - from tax advisors, to sports
clubs, and health insurance companies.
add all foxholes db to clamav, then in amavis make them spam score
mapped
possible reject docx with high spam score ? :)
then in amavisd disable decoders, security wise better imho then no all
kinds of decoders
https://sanesecurity.com/foxhole-databases/
docx is not detected in current foxhole db, but its imho easy to add