Re: [Exim] Blocking sobig.f

Pàgina inicial
Delete this message
Reply to this message
Autor: Jerry Bell
Data:  
A: Sheldon Hearn, David Saez
CC: exim-users
Assumpte: Re: [Exim] Blocking sobig.f
You are correct. As of a version or two ago it was not, however. IIRC the
first round of sobig viruses were getting through even though I was blocking
"pif". I noticed that the attachment names were uppercase, so for the heck
of it I threw in "PIF" and they started being blocked. I just verified
that, as you said, 4.22-10 does work regardless of case.

Thanks,

Jerry
http://www.syslog.org
----- Original Message -----
From: "Sheldon Hearn" <sheldonh@???>
To: "David Saez" <david@???>
Cc: <jerry@???>; <exim-users@???>
Sent: Monday, August 25, 2003 6:59 AM
Subject: Re: [Exim] Blocking sobig.f


On (2003/08/25 12:06), David Saez wrote:

> > This has worked well for me. I've heard much talk about this not always
> > working and one reason I've found is that the demime acl is case
> > sensitive. I don't have all permutations here, but upper and lower seem
> > to catch most all of them.
>
> I take a look at demime.c and it seems that file extension comparision is
> not case sensitive. Are you really sure that it's case sensitive ???


It's _definitely_ case insensitive in exiscan-acl-4.22-10.

The claim of case sensitivity was based on either speculation or stale
fact.

Ciao,
Sheldon.

--

## List details at http://www.exim.org/mailman/listinfo/exim-users Exim
details at http://www.exim.org/ ##