Hans Sandsdalen wrote:

I'm not shure if I understand. Will it block only *.exe files, or all
executables??

All Win32 executables begin with a small number of possible binary sequences (the executable header). The exe_filter plugin, like Russ Nelson's viruscan patch for qmail, takes advantage of that fact, as well as the fact that attachments are encoded as text, to block executable attachments. They do not block based on the file extension (since there are potentially 2 dozen extensions that poor trusting Windows will gamely attempt to execute ;), but they block the encoded version of all the executable header signatures which are known.


HTH

John

Reply via email to