[Mimedefang] Danger of .vcs files?

[-ray]

On Thu, 30 Sep 2004, Kevin A. McGrail wrote:

> Fairly certain .vcs is a vCalendar format for doing calendar and event
> exports.  It is used by Outlook and Palm as well as Apple's iCal.

It is.  We have a webmail app that uses vcs to send calendar appointments.  
I setup mimedefang to only allow vcs attachments internally.  In 
filter_bad_filename:

    # Do not allow:
    # - curlies
    # - bad extensions (possibly with trailing dots) at end or
    #   followed by non-alphanum
    $re = '\.' . $bad_exts . '\.*([^-A-Za-z0-9_.,]|$)';
    # allow vcs files on SLU network
    $revcs = '\.' . 'vcs' . '\.*([^-A-Za-z0-9_.,]|$)';
    if ((re_match($entity, $revcs)) && ($RelayAddr =~ /^192\.168\./)) {
        md_graphdefang_log("allowing .vcs from $RelayAddr");
        return 0;
    } else {
        return re_match($entity, $re);
    }


ray
-- 
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
Ray DeJean  				       	 http://www.r-a-y.org
Systems Engineer                    Southeastern Louisiana University
IBM Certified Specialist  	      AIX Administration, AIX Support
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=