Bug #34
mail attachment is not getting blocked.
| Status: | New | Start: | 09/11/2009 | |
|---|---|---|---|---|
| Priority: | Urgent | Due date: | 09/15/2009 | |
| Assigned to: | % Done: | 0% |
||
| Category: | Mail Services | |||
| Target version: | 3.4 |
Description
We have blocked exe files as an attachment. However, if we change the extension,
then the server allows the delivery. Even if we add another extension to a file the server allows the delivery.
Example: - filename.exe.txt
History
Updated by Stefano Fraccaro over 2 years ago
I think this is a normal behaviour... the system check only file names not file content (that can be compressed with upx or other compression system).
In Windows I can't execute anything that has .txt extension....
Updated by Debayan Banerjee over 2 years ago
Stefano Fraccaro wrote:
I think this is a normal behaviour... the system check only file names not file content (that can be compressed with upx or other compression system). In Windows I can't execute anything that has .txt extension....
What are some better methods to find out the file type? There is a command named 'fiile' in *nix systems that does a good job of identifying the same. Here is an excerpt from the man page:
"The magic tests are used to check for files with data in particular fixed formats. The canonical example of this is a binary executable (compiled
program) a.out file, whose format is defined in <elf.h>, <a.out.h> and possibly <exec.h> in the standard include directory. These files have a
‘magic number’ stored in a particular place near the beginning of the file that tells the UNIX operating system that the file is a binary exe‐
cutable, and which of several types thereof."
Updated by Debayan Banerjee over 2 years ago
- Due date changed from 09/11/2009 to 09/15/2009
- Priority changed from Normal to Urgent
Updated by Stefano Fraccaro over 2 years ago
In this case is useful to check also the archive contents.... I can stop zipped exe/cmd/vbs files ;-)
At the moment it's impossible to do....