[Mimedefang] utf-8 issue?

Alexey Lobanov a.lobanov at gctrials.com
Thu Jun 28 03:57:06 EDT 2018


Hi.

On 28.06.2018 1:51, Dianne Skoll wrote:

> Hi,
>
> Can you post the relevant part of your filter code that triggers
> this problem?

It is default code with extended extension list. Trojan writers like 
these file types novadays.

==========

sub filter_bad_filename  {
     my($entity) = @_;
     my($bad_exts, $re);

     # Bad extensions
     $bad_exts = 
'(arj|rar|r15|lzh|uue|7z|xz|xlsm|epf|docm|dotm|dot|tgz|ace|z|gz|ace|jar|ade|adp|app|asd|asf|asx|bas|bat|cab|chm|cmd|com|cpl|dll|exe|fxp|hlp|hta|hto|inf|ini|ins|isp|jse?|lib|lnk|mdb|mde|msc|msi|msp|mst|ocx|pcd|pif|prg|reg|scr|sct|sh|shb|shs|sys|vb|vbe|vbs|vxd|wsc|wsf|wsh|\{[^\}]+\})';

     # Do not allow:
     # - CLSIDs  {foobarbaz}
     # - bad extensions (possibly with trailing dots) at end
     $re = '\.' . $bad_exts . '\.*$';

     return 1 if (re_match($entity, $re));

     # Look inside ZIP files
     if (re_match($entity, '\.zip$') and
         $Features{"Archive::Zip"}) {
         my $bh = $entity->bodyhandle();
         if (defined($bh)) {
             my $path = $bh->path();
             if (defined($path)) {
                 return re_match_in_zip_directory($path, $re);
             }
         }
     }
     return 0;
}

================

>
> Also, MIME::tools 5.009 doesn't exist; I assume it was a typo and
> you meant 5.509?

Correct. Just mistype.

--
Alexey

>
> Regards,
>
> Dianne.
>
> _______________________________________________
> NOTE: If there is a disclaimer or other legal boilerplate in the above
> message, it is NULL AND VOID.  You may ignore it.
>
> Visit http://www.mimedefang.org and http://www.roaringpenguin.com
> MIMEDefang mailing list MIMEDefang at lists.roaringpenguin.com
> http://lists.roaringpenguin.com/mailman/listinfo/mimedefang




More information about the MIMEDefang mailing list