Re: [Qmail-scanner-general] disguised .exe files

[Salvatore T. <to...@pu...>]

Hi Ethy

Just edit /var/qmail/bin/qmail-scanner-queue.pl and change
my $BAD_MIME_CHECKS='2'

Regards

ST

At 18:27 -0300 22-03-2011, Ethy H. Brito wrote:
>On Tue, 22 Mar 2011 20:29:16 +1300
>Jason Haar <Jas...@tr...> wrote:
>
>>  On 03/17/2011 10:41 PM, Salvatore Toribio wrote:
>>  > Hi
>>  >
>>  > I have done a quick check to the code in the current version and I
>>  > didn't find anything that would block an 'exe' file if you changed
>>  > the extension...
>>  >
>>
>>  There is definitely code to do that. However, if Ethy has disabled it
>>  via "--fix-mime 1" (or otherwise turning  $BAD_MIME_CHECKS below the
>>  default value of "2"), then it won't trigger
>
>I checked it. QS was built with "--fix-mime 1" *AND* I also have
>my $BAD_MIME_CHECKS='1';
>
>What if I just change $BAD_MIME_CHECKS='2'?? Will it work properly??
>
>Regards
>
>Ethy
>
>>
>>  I've just tested it - it works with "fix-mime" set to the default value
>>  of 2. I sent a "Content-Type: image/XXX" email with "notepad.gif" -
>>  which was an executable - it was blocked.
>>
>>
>>  --
>>  Cheers
>>
>  > Jason Haar
>