[Mimedefang] blocking

David F. Skoll dfs at roaringpenguin.com
Fri Feb 26 11:47:19 EST 2010


Joseph Brennan wrote:

> uri LOCAL_EXE      /https?:\/\/.*\/.*\.exe$/
> score LOCAL_EXE   10.0

Believe it or not, there are web sites out there that use the .exe
extension the way a sane person would use .cgi.  So you'll see something
like:

	http://acme.example.com/fabulouspromo/signup.exe

that is legitimate (for some interpretation of "legitimate")

*sigh*

Regards,

David.



More information about the MIMEDefang mailing list