On Wed Mar 30 2016 13:34:23 Alex        <mysqlstud...@gmail.com> said:
> 
> /^(Content-(Type|Disposition)\:|[[:space:]]+).*(file)?name="?.*\.doc"?;?$/
> REJECT

/^\s*Content-(Disposition|Type).*name\s*=\s*"?(.*\.(ade|adp|bas|bat|chm|cmd|com|cpl|crt|dll|exe|hlp|hta|inf|ins|isp|js|jse|lnk|mdb|mde|mdt|mdw|msc|msi|msp|mst|nws|ops|pcd|pif|prf|reg|scf|scr\??|sct|shb|shs|shm|swf|vb[esx]?|vxd|wsc|wsf|wsh))(\?=)?"?\s*(;|$)/x
 REJECT Attachment name "$2" may not end with ".$3”

Just add the MS Office file extensions to that.

Then, when your users revolt and are banging on your door with pitchforks and 
torches, take them out again.

-- 
In the end we will not remember the words of our enemies, but the
silence of our friends. -Martin Luther King, Jr

Reply via email to