>> > Werner Fleck wrote: >> > >> > >> >> I do not know for sure but I think file extensions of windows >> executables are the same all over the world. Actually the attachment >> name =?koi8-r?B?NC5wZGYuZXhl?= is displayed in my mail readers >> (evolution, notes and outlook) as "4.pdf.exe". >> >> > At its heart, such encoded filenames have to be "normalized" back to a >> > standard, predicable format with which you can ensure your >> > quarantine-attachments.txt file looks for. Typically we'd have to start >> > using other perl modules such as MIME::Base64 - which I am loathed to do >> > unless there is dire need (I just don't like opening more files than are >> > needed ;-) >> > >> >> As a first try I would just decode the attachment name disregarding the >> character set. The executable file extensions are all plain ascii so >> they should be decoded independant of the character set most time. Then >> if you only compare extensions and not whole fiel names you should be >> ok. >>
Hi, koi8-r is is one of the 8-bit character sets (as opposed to multibytes like utf8 or some far eastern ones), and MIME::Base64 actually turns it into 4.pdf.exe There is a pure perl implementation of MIME::Base64 that would avoid opening yet another .so file Wolfgang Hamann ------------------------------------------------------- SF email is sponsored by - The IT Product Guide Read honest & candid reviews on hundreds of IT Products from real users. Discover which products truly live up to the hype. Start reading now. http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click _______________________________________________ Qmail-scanner-general mailing list Qmail-scanner-general@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general
