[Mimedefang] filtering bad filename vs. file scanning

[Kenneth Porter]

--On Friday, September 26, 2003 11:11 AM +0800 cc <cc at belfordhk.com> wrote:

> Right now, MIMEDefang is discarding EXE files via the
> filter_bad_extensions() function.    But how do I
> scan the EXE file and then Filter it?

On a related note, does anyone have a hunk of code that identifies the
*content* of an attachment (not its name) as that of a Win32 executable? I've
seen some code that does this by checking for several patterns seen in the
base64 encoding matching a Win32 executable header or trailer. What's the best
way to do this in MD?