>> 
>> Bill Randle wrote:
>> > Amavisd-new will also drop attachments with a configurable list
>> > of file extentions, but the question refered to links to exe's,
>> > not actual exe attachments.
>> 
>> Good point -- everyone's primed to think of attachments, it seems.
>> 
>> Here's a stab at it: set up a URI rule.
>> 
>> uri       EXECUTABLE_LINK    /\.(?:exe|scr)$/i
>> describe  EXECUTABLE_LINK    Links to an executable file
>> score     EXECUTABLE_LINK    10
>> 
>> Just a starting place, mind you -- you may want to make it more or less 
>> specific.  And there may still be the occasional site running a binary 
>> CGI on Windows, such that the server will execute the EXE and output 
>> HTML, not offer the EXE for download.

A .scr probably would not be used as a cgi...

the other way round - it is very easy to create a php that offers an exe for 
download....
So jut scoring direct .exe links might cause the bad guys to produce "better" 
download
links

Wolfgang Hamann

>> 
>> .com will, of course, be a challenge.
>> 
>> -- 
>> Kelson Vibber
>> SpeedGate Communications <www.speed.net>
>> 




Reply via email to