Friday, June 6, 2003, 11:57:20 AM, [EMAIL PROTECTED] wrote:
>>My virus scanner (amavis/mcafee) picked up a couple that got past postfix:
>>
>>Kate Campbell - Corn in a box.mp3.exe
>>Mom - ginette fortier 2001.doc.exe
> well, my standard regex includes:
> /^.*name\=\".*\..*\.(pif|shs|shb|ini|cmd|do|hta|reg|net|com|vbs|scr|dll|lnk|hta|vbe|js|jse|bat|vxd|shm)\"$/
>
> REJECT header_11
> so that should catch:
> anything.anything.(pif|shs|shb|ini|cmd|do|hta|reg|net|com|vbs|scr|dll|lnk|hta|vbe|js|jse|bat|vxd|shm)
> Len
I've been using the following (from someone on the Postfix users list) and
it seems to be working for any level of extensions (will wrap but it is all
on one line):
/^Content-(Type|Disposition):.*(file)?name *= *.*\.(exe|msi|pif|com|vbs|scr|dll|
lnk|hta|vbe|js|jse|bat|vxd|shm|chm|shs|wsf|wsh)\"$/ REJECT Email rejected, attac
hments with .${3} extensions not allowed.
I was catching a couple or so a day until yesterday when I caught 18.
--
Chris Scott
Host Orlando, Inc.
http://www.hostorlando.com/
