[Tfug] blocking exe's and com files with postfix

Michael Stenner mstenner at ece.arizona.edu
Mon Jul 19 15:06:47 MST 2004


On Mon, Jul 19, 2004 at 02:57:32PM -0700, elemint at theriver.com wrote:
> in amavisd.conf  the following is commented out:
> 
> #    .zip, .exe, ... - see subroutine determine_file_types().
>   qr'\.[a-zA-Z][a-zA-Z0-9]{0,3}\.(vbs|pif|scr|bat|com|exe|dll)$'i, # 
> double extension
> 
> If I uncomment that will I then be blocking exe's and coms and the other 
> file extensions listed?

That regex appears to block attachments that end with two extensions.
For example,  foxylady.jpg.exe

The reason is that in many cases, windows will hide the .exe (figuring
that the information is conveyed in the icon) and so the user will
only see "foxylady.jpg".  When they double-click on it expecting to
see a picture of Jimi Hendrix, they end up infecting their systems.

					-Michael
-- 
  Michael D. Stenner                            mstenner at ece.arizona.edu
  ECE Department, the University of Arizona                 520-626-1619
  1230 E. Speedway Blvd., Tucson, AZ 85721-0104                 ECE 524G


More information about the tfug mailing list