[Mimedefang] .vcs files

[-ray]

Shawn,

I wasn't sure about .vcs files either and didn't have time to research it.  
Our calendar app also uses .vcs files, so i decided to allow vcs only 
internally, based on $RelayAddr.  Below is my filter_bad_filename 
function.  As always comments/suggestions are welcome.

# This procedure returns true for entities with bad filenames.
sub filter_bad_filename ($) {
    my($entity) = @_;
    my($bad_exts, $re);

    # Bad extensions
    $bad_exts = 
'(ade|adp|app|asd|asf|asx|bas|bat|chm|cmd|com|cpl|crt|dll|exe|eml|fxp|hlp|hta|hto|inf
|ini|ins|isp|jse?|lib|lnk|mdb|mde|msc|msi|msp|mst|ocx|pcd|pif|prg|reg|scr|sct|sh|shb|shs|sys|url|vb|v
be|vbs|vcs|vxd|wmd|wms|wmz|wsc|wsf|wsh|\{)';

    # Do not allow:
    # - curlies
    # - bad extensions (possibly with trailing dots) at end or
    #   followed by non-alphanum
    $re = '\.' . $bad_exts . '\.*([^-A-Za-z0-9_.,]|$)';
    # allow vcs files on SLU network
    $revcs = '\.' . 'vcs' . '\.*([^-A-Za-z0-9_.,]|$)';
    if ((re_match($entity, $revcs)) && ($RelayAddr =~ /^192\.168\./)) {
        md_graphdefang_log("allowing .vcs from $RelayAddr");
        return 0;
    } else {
        return re_match($entity, $re);
    }
}

ray

-- 
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
Ray DeJean  				       	 http://www.r-a-y.org
Systems Engineer                    Southeastern Louisiana University
IBM Certified Specialist  	      AIX Administration, AIX Support
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=

On Wed, 28 Apr 2004, Shawn Button wrote:

> We have had a request to allow .vcs files through mimedefang because Powertrip
> sends them out for itineraries for some of our employees who travel. I have
> attempted to research previous and possible virus propagation via this specific
> file type, but everything I pull up doesn't have info on the actual file
> type...everything is for VCS systems and not what I am looking for.
> 
> Does anyone have any knowledge or history with .vcs files and potential issues
> if we allow this file type through?
> 
> Thank you very much,
> 
> Shawn