On 25-Feb-2009, at 16:31, LuKreme wrote:
/^\s*Content-(Disposition|Type).*name\s*=\s*"?(.*\.(ade|adp|bas|bat| chm|cmd|com|cpl|crt|dll|exe|hlp|hta|inf|ins|isp|js|jse|lnk|mdb|mde| mdt|mdw|msc|msi|msp|mst|nws|ops|pcd|pif|prf|reg|scf|scr\??|sct|shb| shs|shm|swf|vb[esx]?|vxd|wsc|wsf|wsh))(\?=)?"?\s*(;|$)/x REJECT Attachment name "$2" may not end with ".$3"


Oh, I do want to add that while this check used to hit a lot of messages, it almost never hits anymore. Here is one of the 6 times it's matched in the last 31 days:

Jan 30 22:30:11 mail postfix/cleanup[83067]: 69524118B5D7: reject: header Content-Type: application/octet-stream;??name="stmarysca...@ncentral.com " from smtp.usol.com[64.18.225.12]; from=<> to=<kr...@kreme.com> proto=ESMTP helo=<smtp.usol.com>: 5.7.1 Attachment name "stmarysca...@ncentral.com " may not end with ".com"

Of course, since we reject about 90% of the connection attempts before the DATA phase, our numbers on this might be artificially low.


--
The older you get the more you need the people you knew when you
        were young.

Reply via email to