[Mimedefang] Missing Web Attachments

[Albert E. Whale]

Rob MacGregor wrote:

> >From: "Albert E. Whale" <aewhale at abs-comptech.com>
> >
> >I have a user that keeps getting their Web Site Attachments Defang'd.
> >
> >Meanwhile, I'll send Web Attachments to several different Addresses
> >which forward through Various other MimeDefang Servers with everything
> >intact.
> >
> Not until you provide some more details, like the messages from the log and
> the warning the recipient receives...  Version of MD and details of
> customisations to filters would probably be useful too.
>

Hmm, looks like I missed this piece of data on the attachment's Defang Warning:

 An attachment named Yahoo!.url was removed from this document as it
constituted a security hazard.  If you require this document, please contact
the sender and arrange an alternate means of receiving it.

I believe that this message was mangled because the .url was mentioned in the
'Default' Windoze Minimum Bad_Extension Definition.

While I did not write the Bad_Ext, I don't understand the 'danger' of
transmitting the *.url files to unwitting Windoze users.  What are these file
types?

--
Albert E. Whale - CISSP
http://www.abs-comptech.com
----------------------------------------------------------------------
ABS Computer Technology, Inc. - ESM, Computer & Networking Specialists
Sr. Security, Network, and Systems Consultant
Board of Directors - InfraGard - Pittsburgh, PA