[Fwd: RE: [Mimedefang] not catching test viruses]

[Lucas Albers]

The ones that slipped by for me were #17,#18.

19# and 20# showed up, but they were stripped, and it was just a blank
emails.


You can catch clsid with this extension match:

$bad_exts =
'(ade|adp|app|asd|asf|asx|bas|bat|chm|cmd|com|cpl|crt|dll|exe|fxp|hlp|hta|hto|inf|ini|ins|isp|jse?|lib|lnk|mdb|mde|msc|msi|msp|mst|ocx|pcd|pif|prg|reg|scr|sct|sh|shb|shs|sys|url|vb|vbe|vbs|vcs|vxd|wmd|wms|wmz|wsc|wsf|wsh|\{[^\}]+\})';

This is my current bad_ext match.


-- 
Luke Computer Science System Administrator
Security Administrator,College of Engineering
Montana State University-Bozeman,Montana