Re: [Qmail-scanner-general] disguised .exe files

2011-03-23 Thread Jason Haar
On 03/24/2011 05:06 AM, Ethy H. Brito wrote: > Hmmm. That lead to another question. > What if I rename notepad.exe to notepad.txt and attached it as an > "application/octet-stream" and > > .exeSIZE=-1 EXE files not allowed per Company security policy > > is on quarantine-events??? > > What sh

Re: [Qmail-scanner-general] disguised .exe files

2011-03-23 Thread Tomas Charvat
Actually my problem wasnt just exe file. No I didnt reinvent wheel :) How will you block *all* Videos, Audio, Binary ? I have never seen it working like mentioned documentation say. Answer to yours "another question" Detect real mime type and decide whenever you block it or not... regardless m

Re: [Qmail-scanner-general] disguised .exe files

2011-03-23 Thread Salvatore Toribio
At 13:06 -0300 23-03-2011, Ethy H. Brito wrote: >On Wed, 23 Mar 2011 16:46:41 +0100 >Tomas Charvat wrote: > >> Did you i got right, that you are trying to detect renamed extension by >> its extension ? ummm... sounds like mission impossible to me. > >I am not reinventing the wheel. > >from qmai

Re: [Qmail-scanner-general] disguised .exe files

2011-03-23 Thread Tomas Charvat
banned mime types. We got it integrated into qmail-scanner , but somebody would have to create an installation module for ./configuration phase. cheers tomas On 03/23/2011 04:38 PM, Ethy H. Brito wrote: > From: "Ethy H. Brito" > To: Salvatore Toribio > Subject: Re: [Qm

Re: [Qmail-scanner-general] disguised .exe files

2011-03-23 Thread Ethy H. Brito
On Wed, 23 Mar 2011 16:46:41 +0100 Tomas Charvat wrote: > Did you i got right, that you are trying to detect renamed extension by > its extension ? ummm... sounds like mission impossible to me. I am not reinventing the wheel. from qmail-scanner home page: windows executable attachmen

Re: [Qmail-scanner-general] disguised .exe files

2011-03-23 Thread Ethy H. Brito
From: "Ethy H. Brito" To: Salvatore Toribio Subject: Re: [Qmail-scanner-general] disguised .exe files Date: Wed, 23 Mar 2011 12:36:56 -0300 Organization: InterNexo Ltda. X-Mailer: Claws Mail 3.7.6 (GTK+ 2.18.3; i486-pc-linux-gnu) On Wed, 23 Mar 2011 08:58:25 +0100 Salvatore Tori

Re: [Qmail-scanner-general] disguised .exe files

2011-03-23 Thread Salvatore Toribio
Hi Ethy Just edit /var/qmail/bin/qmail-scanner-queue.pl and change my $BAD_MIME_CHECKS='2' Regards ST At 18:27 -0300 22-03-2011, Ethy H. Brito wrote: >On Tue, 22 Mar 2011 20:29:16 +1300 >Jason Haar wrote: > >> On 03/17/2011 10:41 PM, Salvatore Toribio wrote: >> > Hi >> > >> > I have done a

Re: [Qmail-scanner-general] disguised .exe files

2011-03-22 Thread Ethy H. Brito
On Tue, 22 Mar 2011 20:29:16 +1300 Jason Haar wrote: > On 03/17/2011 10:41 PM, Salvatore Toribio wrote: > > Hi > > > > I have done a quick check to the code in the current version and I > > didn't find anything that would block an 'exe' file if you changed > > the extension... > > > > There is

Re: [Qmail-scanner-general] disguised .exe files

2011-03-22 Thread Salvatore Toribio
At 20:29 +1300 22-03-2011, Jason Haar wrote: >On 03/17/2011 10:41 PM, Salvatore Toribio wrote: >> Hi >> >> I have done a quick check to the code in the current version and I >> didn't find anything that would block an 'exe' file if you changed >> the extension... >> > >There is definitely code

Re: [Qmail-scanner-general] disguised .exe files

2011-03-22 Thread Jason Haar
On 03/17/2011 10:41 PM, Salvatore Toribio wrote: > Hi > > I have done a quick check to the code in the current version and I > didn't find anything that would block an 'exe' file if you changed > the extension... > There is definitely code to do that. However, if Ethy has disabled it via "--fix-

Re: [Qmail-scanner-general] disguised .exe files

2011-03-19 Thread Ethy H. Brito
On Thu, 17 Mar 2011 10:41:45 +0100 Salvatore Toribio wrote: > Hi Hi. > > I have done a quick check to the code in the current version and I > didn't find anything that would block an 'exe' file if you changed > the extension... > > Well, I am not sure but I think that in old versions of QS

Re: [Qmail-scanner-general] disguised .exe files

2011-03-17 Thread Salvatore Toribio
Hi I have done a quick check to the code in the current version and I didn't find anything that would block an 'exe' file if you changed the extension... Well, I am not sure but I think that in old versions of QS it blocked this kind of files, because I have to change the extension to somethi

[Qmail-scanner-general] disguised .exe files

2011-03-16 Thread Ethy H. Brito
Hi All I am running some tests with QS and I may be missing something. It is blocking ".exe" extension files but if I take this same file and rename it to ".gif", QS let it pass. Curious fact is: Mon, 07 Mar 2011 08:48:49 BRT:4748: found C-T attachment filename "putty_teste.gif" Mon, 07 Mar 2

[Qmail-scanner-general] disguised .exe files

2011-03-07 Thread Ethy H. Brito
Hi All I am running some tests with QS and I may be missing something. It is blocking ".exe" extension files but if I take this same file and rename it to ".gif", QS is letting it pass. Curious fact is: Mon, 07 Mar 2011 08:48:49 BRT:4748: found C-T attachment filename "putty_teste.gif" Mon, 0