Bug #34

mail attachment is not getting blocked.

Added by Sumit Sen over 2 years ago. Updated over 2 years ago.

Status:New Start:09/11/2009
Priority:Urgent Due date:09/15/2009
Assigned to:Debayan Banerjee % Done:

0%

Category:Mail Services
Target version:3.4

Description

We have blocked exe files as an attachment. However, if we change the extension,
then the server allows the delivery. Even if we add another extension to a file the server allows the delivery.
Example: - filename.exe.txt

History

Updated by Debayan Banerjee over 2 years ago

  • Target version changed from 5 to 3.4

Updated by Stefano Fraccaro over 2 years ago

I think this is a normal behaviour... the system check only file names not file content (that can be compressed with upx or other compression system).
In Windows I can't execute anything that has .txt extension....

Updated by Debayan Banerjee over 2 years ago

Stefano Fraccaro wrote:

I think this is a normal behaviour... the system check only file names not file content (that can be compressed with upx or other compression system). In Windows I can't execute anything that has .txt extension....

What are some better methods to find out the file type? There is a command named 'fiile' in *nix systems that does a good job of identifying the same. Here is an excerpt from the man page:

"The magic tests are used to check for files with data in particular fixed formats. The canonical example of this is a binary executable (compiled
program) a.out file, whose format is defined in <elf.h>, <a.out.h> and possibly <exec.h> in the standard include directory. These files have a
‘magic number’ stored in a particular place near the beginning of the file that tells the UNIX operating system that the file is a binary exe‐
cutable, and which of several types thereof."

Updated by Debayan Banerjee over 2 years ago

  • Due date changed from 09/11/2009 to 09/15/2009
  • Priority changed from Normal to Urgent

Updated by Stefano Fraccaro over 2 years ago

In this case is useful to check also the archive contents.... I can stop zipped exe/cmd/vbs files ;-)
At the moment it's impossible to do....

Also available in: Atom PDF