I've noticed that some mime attachments are passing through the qmail-scanner..
I've been doing a lot of tests.
Example:
I received a file name: Dia das Mães.pps attached to a message
The message had the following MIME Headers in its source.
------=_NextPart_000_008A_01C4366A.65FF25F0
Content-Type: application/vnd.ms-powerpoint;
name="=?iso-8859-1?Q?Dia_Das_M=E3es2.pps?="
Content-Transfer-Encoding: base64
Content-Disposition: attachment;
filename="=?iso-8859-1?Q?Dia_Das_M=E3es2.pps?="And perlscanner decoded it as ?iso-8859-1?q?dia_das_m=e3es2.pps?=
p_s: checking =?iso-8859-1?q?dia_das_m=e3es2.pps?= against perlscanner database...
p_s: file =?iso-8859-1?q?dia_das_m=e3es2.pps?= is lowercased to =?iso-8859-1?q?dia_das_m=e3es2.pps?= and
has extension .pps?=
So the rule ".pps 0 PPS Not allowed" didn't block this file.
To solve that, I've modified the rule in this way
".pps?= 0 PPS Not allowed",
and It has worked, but I don't know if it is the best way to solve the problem.
-- Carlos Diego Russo Medeiros Expresso Digital Internet Solutions Joinville - SC - Brazil - 47-433-1516 Security Officer - System Administrator MCSO - Modulo Certified Security Officer CCNA - Cisco Certified Network Associate @work: [EMAIL PROTECTED] http://carlos.expresso.com.br ICQ UIN: 336317
-------------------------------------------------------
This SF.Net email is sponsored by Sleepycat Software
Learn developer strategies Cisco, Motorola, Ericsson & Lucent use to deliver higher performing products faster, at low TCO.
http://www.sleepycat.com/telcomwpreg.php?From=osdnemail3
_______________________________________________
Qmail-scanner-general mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general
