728x90
반응형
Hello Everyone,

I searched through my entire quarantine folder and grep'd for files named in this format msg-12341-1.txt. 
I scanned them with file and file -i. The following are the results.
I entered them into my filetype.conf.rules and it seems to work.

allow   ASCII English text, with escape sequences       text/plain; charset=us-ascii    -       -
allow   ASCII text      text/plain; charset=us-ascii    -       -
allow   DOS executable  text/plain; charset=iso-8859-1  -       -
allow   DOS executable  text/plain; charset=unknown     -       -
allow   DOS executable  text/plain; charset=utf-8       -       -
allow   DOS executable  text/x-mail; charset=unknown    -       -
allow   DOS executable  text/x-mail; charset=utf-8      -       -
allow   HTML document text      text/html       -       -
allow   UTF-8 Unicode English text      text/plain; charset=utf-8       -       -

I tested that I'm not inadvertently letting DOS executables through, and it they remain blocked. 
It appears that when both 2/5 and 3/5 are true, they are a match and thus allowed through. 
If someone could verify that would be nice.

In the time when I didn't have a solution, 
I changed the /usr/bin/file to /usr/bin/file -i just to alleviate the problem. 
But I think this one solves it, but I don't know whether this is the right way to do it.

I have prepended to my filetype.rules.conf.

p

 

http://lists.mailscanner.info/pipermail/mailscanner/2010-July/096257.html

728x90
SMALL
Posted by gromet

블로그 이미지
나는 운이 좋은 사람이다 나는 나날이 점점 더 좋아진다 내가 하는 선택과 행동은 반드시 성공으로 이어진다 내게는 인내력과 지속력이 있다 네게는 좋은것들만 모여든다
gromet

공지사항

Yesterday
Today
Total
반응형

달력

 « |  » 2024.9
1 2 3 4 5 6 7
8 9 10 11 12 13 14
15 16 17 18 19 20 21
22 23 24 25 26 27 28
29 30

최근에 올라온 글

최근에 달린 댓글

최근에 받은 트랙백

글 보관함

160x600