Dear List,
I'm having trouble with the perlscanner extention filtering. (QS 1.24)
Apparently when the filename is encoded by windows to another code page (NOT
ASCII 7bit), the perlscanner is unable to filter it.
For example, my quarantine-attachments.txt is set to filter out, among other
extentions, wmv files.
This is an example from one of the emails which gets through. The filename
is in Hebrew and is encoded by MS Outlook before sending. On the receiving
end it is correctly opened and shown to the user. On the other hand, when
the filename is in English, it is filtered correctly.
------=_NextPart_000_0032_01C53787.386D0A70
Content-Type: video/x-ms-wmv;
name="=?windows-1255?B?4ePp9+Qud212?="
Content-Transfer-Encoding: 7bit
Content-Disposition: attachment;
filename="=?windows-1255?B?4ePp9+Qud212?="
Can I do something to perlscanner to enable correct filtering of such file
names?
Am I missing something?
Please help.
P.S.
In my humble opinion this is a security flaw, which allows to bypass
perlscanner extention filtering, with very little work.
I and other people depend on perlscanner filtering for the first few hours
of a new virus dispersion, before the signatures get updated.
Moti
--
No virus found in this outgoing message.
Checked by AVG Anti-Virus.
Version: 7.0.308 / Virus Database: 266.9.1 - Release Date: 4/1/2005
-------------------------------------------------------
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now.
http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click
_______________________________________________
Qmail-scanner-general mailing list
Qmail-scanner-general@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general
