[Mimedefang] One that the default filter missed...

[Mark Roedel]

> -----Original Message-----
> From: David F. Skoll [mailto:dfs at roaringpenguin.com] 
> Sent: Thursday, May 23, 2002 3:28 PM
> To: mimedefang at lists.roaringpenguin.com
> Subject: Re: [Mimedefang] One that the default filter missed...
> 
> 
> On Thu, 23 May 2002, Dave Williss wrote:
> 
> >     Content-Type: audio/x-wav;
> >          name=;sz=1x1;nav2=0;nav1=204;ord=ORXTJMDDQL[1].exe
> 
> If a MUA interprets that as a filename ending in ".exe", the MUA is
> brain-damaged beyond repair.  The semicolon delimits parts of the MIME
> header.  There's no way to patch around that without introducing all
> kinds of other problems.
> 
> What I do, by the way, is simply block attachments of type 
> audio/x-wav in addition to the filename checks. :-)

I'm a little nicer than you...

I allow attachments of type audio/x-wav *IF* the file actually has an
extension of .wav.  (Which might not work on every conceivable
permutation, but would have caught this one anyway.)  I do the same
thing for image/jpeg and several other types.


---
Mark Roedel           | "Blessed is he who has learned to laugh
Systems Programmer    |  at himself, for he shall never cease
LeTourneau University |  to be entertained."
Longview, Texas, USA  |                          -- John Powell