Mai jos e fisierul de configurare utilizat in amavis-new(debian6), pt. partea de
fisiere banate. Am depistat urmatoare problema, daca se trimite un fisier
de tip XML(care ar trbui sa fie banat), si i se pune extensia PDF, atunci
acel fisier trece de amavis, si nu mai este blocat. Nu imi dau seama, ce si
unde gresesc.

Multumesc



use strict;

#
# Place your configuration directives here.  They will override those in
# earlier files.
#
# See /usr/share/doc/amavisd-new/ for documentation and examples of
# the directives you can use in this file
#

# new-style of banned lookup table
$banned_namepath_re = new_RE(

### BLOCKED ANYWHERE
 [ qr'(\.xml|\.XML)$' => 1 ], # block XML


  qr'(?# BLOCK Microsoft EXECUTABLES and DLL )
^ (.*\t)? T=(exe-ms|dll) (\t.*)? $'xm, # banned file(1) types, rudimentary

 qr'(?# BLOCK ANY EXECUTABLE )
    ^ (.*\t)? T=exe (\t.*)? $'xm,          # banned file(1) type

 qr'(?# BLOCK THESE TYPES )
^ (.*\t)? T=(exe|lha|tnef|cab|dll|dbf|xml) (\t.*)? $'xm, # banned file(1) types

# # allow true office docs
  [ qr'(?# SPECIAL ALLOW OFFICE - MAGIC NAMES)
       (.*\t)? T=(doc|docx)
         \t(.*\t)? N=[^\t\n]* \. (doc|rtf|msg|mmp|prj|xls)
         (\t.*)? $'xmi => 0 ],






### BLOCK THE FOLLOWING, EXCEPT WITHIN UNIX ARCHIVES:

  # within traditional Unix archives allow any name and type
  [ qr'(?#rule-4) ^ (.*\t)? T=(tar|rpm|cpio) (\t.*)? $'xmi => 0 ],  # allow

  # banned filename extensions (in declared names) anywhere - rudimentary
  qr'(?# BLOCK COMMON NAME EXENSIONS )
     ^ (.*\t)? N= [^\t\n]* \. (pif|scr) (\t.*)? $'xmi,

  # block these MIME types
qr'(?#NO X-MSDOWNLOAD) ^(.*\t)? M=application/x-msdownload (\t.*)? $'xmi, qr'(?#NO X-MSDOS-PROGRAM)^(.*\t)? M=application/x-msdos-program(\t.*)? $'xmi, qr'(?#NO HTA) ^(.*\t)? M=application/hta (\t.*)? $'xmi,

 qr'(?#No animated cursors) ^(.*\t)? T=ani                   (\t.*)? $'xm,

  # block certain double extensions in filenames
  qr'(?# BLOCK DOUBLE-EXTENSIONS )
     ^ (.*\t)? N= [^\t\n]* \. [^./\t\n]* [A-Za-z] [^./\t\n]* \. \ *
                  (exe|vbs|pif|scr|bat|cmd|com|cpl|dll) [. ]* (\t.*)? $'xmi,

  [ qr'(?# BLOCK EMPTY MIME PART APPLICATION/OCTET-STREAM )
       ^ (.*\t)? M=application/(octet-stream|x-msdownload|x-msdos-program)
       \t(.*\t)* T=empty (\t.*)? $'xmi
    => 'DISCARD' ],

# # block if any component can not be decoded (is encrypted or bad archive)
 qr'(?# BLOCK IF UNDECIPHERABLE ) ^ (.*\t)? A=U (\t.*)? \z'xmi,


# # banned filename extensions (in suggested names) anywhere - on my site
 qr'(?# BLOCK COMMON site EXENSIONS )
^ (.*\t)? N= [^\t\n]* \. (exe|msi|vbs|pif|scr|cpl|bat|cmd|com|dbf|xml|arj) (\t.*)? $'xmi,



 qr'(?# BLOCK CURSOR AND ICON NAME EXENSIONS )
    ^ (.*\t)? N= [^\t\n]* \. (ani|cur|ico) (\t.*)? $'xmi,


);

# use old or new style of banned lookup table; not both to avoid confusion
#
 @banned_filename_maps = ();   # to disable old-style
#  $banned_namepath_re = undef;  # to disable new-style





#------------ Do not modify anything below this line -------------
1;  # ensure a defined return


----------------------------------------------------------------
This message was sent using IMP, the Internet Messaging Program.

Attachment: pgphJss3FsnBX.pgp
Description: PGP Digital Signature

_______________________________________________
RLUG mailing list
RLUG@lists.lug.ro
http://lists.lug.ro/mailman/listinfo/rlug

Raspunde prin e-mail lui