[Mimedefang] blocking
David F. Skoll
dfs at roaringpenguin.com
Fri Feb 26 11:47:19 EST 2010
Joseph Brennan wrote:
> uri LOCAL_EXE /https?:\/\/.*\/.*\.exe$/
> score LOCAL_EXE 10.0
Believe it or not, there are web sites out there that use the .exe
extension the way a sane person would use .cgi. So you'll see something
like:
http://acme.example.com/fabulouspromo/signup.exe
that is legitimate (for some interpretation of "legitimate")
*sigh*
Regards,
David.
More information about the MIMEDefang
mailing list