(yes i know it's not 100% perfect in any case)

but anybody using "mime_header_checks" by one of the similar howtos out
there should review the configuration - without \" at the end of the
regex this is prone to false positives

two examples from real world (.scr and .com wrongly rejected)

* name="strace.Scripting-with-the-xss.pdf.txt"
* filename="BOOKING.COM: Hotel 342802.PDF"

i think this was the one i followed
http://www.cyberciti.biz/tips/postfix-block-mime-attachment-files.html
_________________________________________________

cat /etc/postfix/mime_header_checks.cf
# Reject Attachment-Extensions
/name=[^>]*\.(386|acm|ade|adp|awx|ax|bas|bat|bin|cdf|chm|cnv|com|cpl|crt|csh|dll|dlo|drv|exe|hlp|hta|inf|ins|isp|jse|lnk|msc|msi|msp|mst|ocx|pcd|pif|pl|reg|scr|script|sct|sh|shb|shs|sys|so|tlb|vb|vbe|vbs|wiz|wll|wpc|wsc|wsf|wsh)\"/
REJECT 554 Attachment Blocked


Reply via email to