You are correct. As of a version or two ago it was not, however. IIRC the
first round of sobig viruses were getting through even though I was blocking
"pif". I noticed that the attachment names were uppercase, so for the heck
of it I threw in "PIF" and they started being blocked. I just verified
that, as you said, 4.22-10 does work regardless of case.
Thanks,
Jerry
http://www.syslog.org
----- Original Message -----
From: "Sheldon Hearn" <sheldonh@???>
To: "David Saez" <david@???>
Cc: <jerry@???>; <exim-users@???>
Sent: Monday, August 25, 2003 6:59 AM
Subject: Re: [Exim] Blocking sobig.f
On (2003/08/25 12:06), David Saez wrote:
> > This has worked well for me. I've heard much talk about this not always
> > working and one reason I've found is that the demime acl is case
> > sensitive. I don't have all permutations here, but upper and lower seem
> > to catch most all of them.
>
> I take a look at demime.c and it seems that file extension comparision is
> not case sensitive. Are you really sure that it's case sensitive ???
It's _definitely_ case insensitive in exiscan-acl-4.22-10.
The claim of case sensitivity was based on either speculation or stale
fact.
Ciao,
Sheldon.
--
## List details at
http://www.exim.org/mailman/listinfo/exim-users Exim
details at
http://www.exim.org/ ##
