Re: [Qmail-scanner-general]Critical error in qmail-scanner

2005-02-08 Thread hamann . w
>> > Werner Fleck wrote: >> > >> > >> >> I do not know for sure but I think file extensions of windows >> executables are the same all over the world. Actually the attachment >> name =?koi8-r?B?NC5wZGYuZXhl?= is displayed in my mail readers >> (evolution, notes and outlook) as "4.pdf.exe". >> >

Re: [Qmail-scanner-general]Critical error in qmail-scanner

2005-02-08 Thread Werner Fleck
Am Dienstag, den 08.02.2005, 21:53 +1300 schrieb Jason Haar: > Werner Fleck wrote: > > >I attached an email showing the error. The critical lines are: > > > >Content-Type: application/octet-stream; > > name="=?koi8-r?B?NC5wZGYuZXhl?=" > >Content-Disposition: attachment; > > > > >

Re: [Qmail-scanner-general]Critical error in qmail-scanner

2005-02-08 Thread Jason Haar
Werner Fleck wrote: I attached an email showing the error. The critical lines are: Content-Type: application/octet-stream; name="=?koi8-r?B?NC5wZGYuZXhl?=" Content-Disposition: attachment; This was discussed last year, and is a known issue. I ask for feedback/help from non-ASCII si

[Qmail-scanner-general]Critical error in qmail-scanner

2005-02-07 Thread Werner Fleck
There is an error in qmail-scanner which I consider critical. I have QS configured to block emails which have executable content attached, e.g. *.exe, *.bat and so on. Unfortunately it is possible for an attacker to bypass this. This happens when the name of the attachment itself is encoded. This h