Re: [exim] caution to those blocking files by extension

2006-11-06 Thread Mike Meredith
Sometime around Sat, 4 Nov 2006 15:17:22 +, it may be that Chris Lightfoot wrote: > GNU file(1) recognises PE > executables OK (though a look at the magic file suggests > that actually the way they do it would be easy to evade so > better to write a little program to do it, I think; it's > prob

Re: [exim] caution to those blocking files by extension

2006-11-05 Thread W B Hacker
Peter Velan wrote: > am 2006-11-04 14:37 schrieb John Hall: >> On 11/4/06, Peter Velan <[EMAIL PROTECTED]> wrote: >> > Will windoze execute a file that ends in dot-space-space-space-exe ? > dosent the os see this as NOT ending in .exe I think that windows will happily exec the file, b

Re: [exim] caution to those blocking files by extension

2006-11-04 Thread Chris Lightfoot
Historically Windows has been very enthusiastic about executing files that you mightn't expect it to. (E.g. you can create a PE file with a .pif extension which the shell will execute; and you can switch on the POSIX execute bit for a file of arbitrary extension and cmd.exe would execute *that*, or

Re: [exim] caution to those blocking files by extension

2006-11-04 Thread Peter Velan
am 2006-11-04 14:37 schrieb John Hall: > On 11/4/06, Peter Velan <[EMAIL PROTECTED]> wrote: > >> >> Will windoze execute a file that ends in dot-space-space-space-exe ? >> >> dosent the os see this as NOT ending in .exe >> > >> > I think that windows will happily exec the file, but I don't have a

Re: [exim] caution to those blocking files by extension

2006-11-04 Thread W B Hacker
John Hall wrote: > On 11/4/06, Peter Velan <[EMAIL PROTECTED]> wrote: > Will windoze execute a file that ends in dot-space-space-space-exe ? dosent the os see this as NOT ending in .exe >>> I think that windows will happily exec the file, but I don't have a >>> machine to test on. >> Yo

Re: [exim] caution to those blocking files by extension

2006-11-04 Thread John Hall
On 11/4/06, Peter Velan <[EMAIL PROTECTED]> wrote: > >> Will windoze execute a file that ends in dot-space-space-space-exe ? > >> dosent the os see this as NOT ending in .exe > > > > I think that windows will happily exec the file, but I don't have a > > machine to test on. > > You are right - Wi

Re: [exim] caution to those blocking files by extension

2006-11-04 Thread John Hall
On 11/4/06, Stephen Gran <[EMAIL PROTECTED]> wrote: > > Will windoze execute a file that ends in dot-space-space-space-exe ? > > dosent the os see this as NOT ending in .exe > > I think that windows will happily exec the file, but I don't have a > machine to test on. Under both Windows XP SP2 an

Re: [exim] caution to those blocking files by extension

2006-11-04 Thread Peter Velan
am 2006-11-04 14:11 schrieb Stephen Gran: > On Sat, Nov 04, 2006 at 01:55:22AM +0200, Stuart Gall said: >> On 3 Nov 2006, at 15:50, Stephen Gran wrote: >> > On Fri, Nov 03, 2006 at 03:34:15PM +0200, Brent Clark said: >> >> >> >> condition = ${if match{$acl_m1}{\N^( >> > [...] >> >>

Re: [exim] caution to those blocking files by extension

2006-11-04 Thread Stephen Gran
On Sat, Nov 04, 2006 at 01:55:22AM +0200, Stuart Gall said: > On 3 Nov 2006, at 15:50, Stephen Gran wrote: > > On Fri, Nov 03, 2006 at 03:34:15PM +0200, Brent Clark said: > >> > >> condition = ${if match{$acl_m1}{\N^( > > [...] > >> )$\N}{1}{0}} > > >

Re: [exim] caution to those blocking files by extension

2006-11-03 Thread Stuart Gall
On 3 Nov 2006, at 15:50, Stephen Gran wrote: > On Fri, Nov 03, 2006 at 03:34:15PM +0200, Brent Clark said: >> >> Hey all >> >> I just found a hole / bug in my acl for file extension handling. >> >> This is my current ACL >> >> # File extension filtering. >> deny set acl_m1 = ${extract{-1}{.}{${

Re: [exim] caution to those blocking files by extension

2006-11-03 Thread Dennis Davis
On Fri, 3 Nov 2006, Brent Clark wrote: > From: Brent Clark <[EMAIL PROTECTED]> > To: exim-users@exim.org > Date: Fri, 03 Nov 2006 15:34:15 +0200 > Subject: [exim] caution to those blocking files by extension > > I just found a hole / bug in my acl for file extension h

Re: [exim] caution to those blocking files by extension

2006-11-03 Thread Stephen Gran
On Fri, Nov 03, 2006 at 03:34:15PM +0200, Brent Clark said: > > Hey all > > I just found a hole / bug in my acl for file extension handling. > > This is my current ACL > > # File extension filtering. > deny set acl_m1 = ${extract{-1}{.}{${lc:$mime_filename}}} > message = Disallowed file exte

[exim] caution to those blocking files by extension

2006-11-03 Thread Brent Clark
Hey all I just found a hole / bug in my acl for file extension handling. This is my current ACL # File extension filtering. deny set acl_m1 = ${extract{-1}{.}{${lc:$mime_filename}}} message = Disallowed file extension log_message = REJECTED ATTACHMENT ($acl_m1) (rcpt to: $recipients) co