[Mimedefang] Bad, bad_filename filtering ?

Rudolph Pereira r.pereira at isu.usyd.edu.au
Wed Oct 8 20:49:00 EDT 2003


On Wed, Oct 08, 2003 at 07:39:55PM -0400, James B. Huber wrote:
> First question, why are we checking anything of a
> "path" component in the bad_filename check ? Or perhaps
> better asked, why are we NOT calling the filename
> what comes after DIRSEP (either "/" or "\" depending
> upon your *NIX/Dos) ?
If you have a method of detecting what OS, and even better what
particular revision (and vulnerabilities) the receiver/reader is or will
be running from your mail server/filter, I'm all ears :)



More information about the MIMEDefang mailing list