On 27.02.23 12:38, natan wrote:
I gat many many e-mails with virus and double exstension like:
*.jpg.img
*.pdf.img
*.*.img

I try in header_checks.pcre

^Content-(Type|Disposition):.*(file)?name=.*(\.|=2E)(exe|ade|adp|bas|bat|chm|cmd|cpl|hlp|hta|inf|ins|isp|img|js|jse|mde|msc|msi|msp|mst|pcd|pif|reg|scr|sct|shs|shb|vb|vbe|vbs|wsc|wsf|wsh|mim|b64|bhx|hqx|xxe|uu|uue)"/ REJECT

you must use mime_header_checks

http://www.postfix.org/postconf.5.html#mime_header_checks

but I recommend antivirus and/or antispam plugin to check these.
They can do much more than just scan mime headers

--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
- Holmes, what kind of school did you study to be a detective?
- Elementary, Watkins.  -- Daffy Duck & Porky Pig

Reply via email to