Noel Jones schrieb:

>At 02:14 PM 12/11/2006, Jakob Curdes wrote:
>  
>
>>Update : Even to send the mail including the snippet to the amavis list
>>I had to put myself on the banned_filenames_maps list....
>>How does amavis recognize banned .exe types (not names, there was no
>>attachment...) ? Could that be a file(1) problem ?
>>    
>>
>
>Yes, apparently a problem with file(1).
>
>File(1) seems to label any file that starts with LZ as an 
>executable.  I don't know if this is an actual bug or not.
>
>(try it! way cool!).
>%  echo LZ > foo
>%  file foo
>foo: MS-DOS executable (built-in)
>
>When amavisd-new split your message into individual mime parts, one 
>of the text segments started with LZ.  File(1) labeled it as an 
>executable and banned that "attachment".
>
>  
>
Hmm. The mail was plain ASCII.... no parts. There is only one .txt in 
the log, as advertised :

X-Amavis-Alert: BANNED, message contains part:
        P=p001,L=1,M=text/plain,T=exe,T=exe-ms

But nevertheless you are right : the TEXT of this mail starts with the 
letters LZ.

Bingo.

But that's a bit hard, isn't it ? How could the guessing logic of 
file(1) be enhanced or such cases circumvented in another way by amavis 
without file type guessing totally ??

Yours,
JC



-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys - and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
_______________________________________________
AMaViS-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/

Reply via email to