[Mimedefang] Suggestion: More bad filename extensions

[Mickey Hill]

Hi all,

A suggestion:

You've seen this before.... the list of bad filenames that are
potentially executable by Windows in one form or another (
http://office.microsoft.com/Assistance/2000/Out2ksecFAQ.aspx ).

Should these extensions be added to filter_bad_filename in the example
filter?

Or, better yet, reject /^X-Mailer:.*?Microsoft/ (in a perfect world :)

diff -u mimedefang-filter.example mimedefang-filter.proposed 
--- mimedefang-filter.example   Mon May 13 09:27:05 2002
+++ mimedefang-filter.proposed  Mon May 13 14:32:30 2002
@@ -46,7 +46,7 @@
 # This procedure returns true for entities with bad filenames.
 sub filter_bad_filename {
     my($entity) = @_;
-    return re_match($entity,
'\.(bat|chm|cmd|com|cpl|dll|exe|hlp|hta|ini|js|lib|lnk|msi|msp|ocx|pif|r
eg|scr|sct|shb|shs|sys|vbe|vbs?|vxd|wsf|wsh)');
+    return re_match($entity,
'\.(ade|adp|bas|bat|chm|cmd|com|cpl|crt|dll|exe|hlp|hta|inf|ini|ins|isp|
js|jse|lib|lnk|mdb|mde|msc|msi|msp|mst|ocx|pcd|pif|reg|scr|sct|shb|shs|s
ys|url|vb|vbe|vbs|vxd|wsc|wsf|wsh)');
 }
 
 
#***********************************************************************

-------------------------
Mickey Hill
Rudolph's Inc
2021 Rob Mason Rd
PO Box 69
Murray KY 42071 USA
Phone (270) 753-0686 x124
      (800) 231-2295
Fax   (270) 753-0753
mickey at rudolphtire.com
www.rudolphtire.com