[Mimedefang] Why does MIMEDefang strip .VCFs

[Cormack, Ken]

You're right, David...

I compared my list of forbiddeen filename extensions to the one in the
sample filter.  My list has grown over time, and I see that .vcf's were
added to our filter by our information security group a few years ago, when
they added most of the list of extensions that MS considers directly
executable.

Ken

-----Original Message-----
From: mimedefang-bounces at lists.roaringpenguin.com
[mailto:mimedefang-bounces at lists.roaringpenguin.com] On Behalf Of David F.
Skoll
Sent: Friday, February 10, 2006 8:47 AM
To: mimedefang at lists.roaringpenguin.com
Subject: Re: [Mimedefang] Why does MIMEDefang strip .VCFs


Cormack, Ken wrote:

> I have a user complaining about the fact that MIMEDefang strips .vcf's
from
> emails, and I'm not sure what answer to give.  Are .vcf's a vector for
some
> kind of attack?  Or is there a knowledgebase article somewhere that
> describes problems with allowing .vcfs in emails?

The sample filter doesn't strip .VCF files.  This must be something you've
added.

Remember, MIMEDefang doesn't do anything unless you tell it to. :-)

Regards,

David.
_______________________________________________
NOTE: If there is a disclaimer or other legal boilerplate in the above
message, it is NULL AND VOID.  You may ignore it.

Visit http://www.mimedefang.org and http://www.roaringpenguin.com
MIMEDefang mailing list MIMEDefang at lists.roaringpenguin.com
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang