git://git.exim.org
/
exim-website.git
/ commitdiff
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
shortlog
|
log
|
commit
| commitdiff |
tree
raw
|
patch
|
inline
| side by side (parent:
4b523bd
)
fixed main location
author
nigel
<nigel>
Mon, 23 Oct 2000 13:44:37 +0000
(13:44 +0000)
committer
nigel
<nigel>
Mon, 23 Oct 2000 13:44:37 +0000
(13:44 +0000)
mirrors.html
patch
|
blob
|
history
system_filter.exim
patch
|
blob
|
history
diff --git
a/mirrors.html
b/mirrors.html
index 93846c576521369df46725a8a329f5c83f2c7ff8..3c62e4e50c873ae25731bd5fa3b93a7fe9266681 100644
(file)
--- a/
mirrors.html
+++ b/
mirrors.html
@@
-15,8
+15,8
@@
<dl>
<dt>
<b>
<dl>
<dt>
<b>
- <a href="ftp://ftp.c
us.cam.ac.uk/pub/software/programs
/exim/">
- ftp://ftp.c
us.cam.ac.uk/pub/software/programs
/exim/
+ <a href="ftp://ftp.c
sx.cam.ac.uk/pub/software/email
/exim/">
+ ftp://ftp.c
sx.cam.ac.uk/pub/software/email
/exim/
</a>
</b>
</dt>
</a>
</b>
</dt>
@@
-344,6
+344,6
@@
<hr>
<address><a href="mailto:Postmaster@exim.org">Nigel Metheringham</a></address>
<!-- Created: Mon Aug 25 15:46:41 BST 1997 -->
<hr>
<address><a href="mailto:Postmaster@exim.org">Nigel Metheringham</a></address>
<!-- Created: Mon Aug 25 15:46:41 BST 1997 -->
- <h4>$Id: mirrors.html,v 1.1
0 2000/04/09 22:02:33
nigel Exp $</h4>
+ <h4>$Id: mirrors.html,v 1.1
.1.1 2000/05/22 19:54:41
nigel Exp $</h4>
</body>
</html>
</body>
</html>
diff --git
a/system_filter.exim
b/system_filter.exim
index 91f456e443f0764183915f5728dd3122ada96f81..18a4756db21cfd91442d289b65100295c29aaa7f 100644
(file)
--- a/
system_filter.exim
+++ b/
system_filter.exim
@@
-1,5
+1,5
@@
# Exim filter
# Exim filter
-## Version: 0.0
8
+## Version: 0.0
9
## If you haven't worked with exim filters before, read
## the install notes at the end of this file.
## If you haven't worked with exim filters before, read
## the install notes at the end of this file.
@@
-43,10
+43,10
@@
endif
# Look for single part MIME messages with suspicious name extensions
# Check Content-Type header [vb2_regexp]
# Look for single part MIME messages with suspicious name extensions
# Check Content-Type header [vb2_regexp]
-if $header_content-type: matches "(?:file)?name=(\"[^\"]+\\\\.(?:vb[se]|ws[fh]|jse?|exe|com|shs|bat
)\"|[\\\\w.-]+\\\\.(?:vb[se]|ws[fh]|jse?|exe|com|shs|bat
))"
+if $header_content-type: matches "(?:file)?name=(\"[^\"]+\\\\.(?:vb[se]|ws[fh]|jse?|exe|com|shs|bat
|scr|pif)\"|[\\\\w.-]+\\\\.(?:vb[se]|ws[fh]|jse?|exe|com|shs|bat|scr|pif
))"
then
fail text "This message has been rejected because it has\n\
then
fail text "This message has been rejected because it has\n\
- \ta
n apparent
ly executable attachment $1\n\
+ \ta
potential
ly executable attachment $1\n\
\tThis form of attachment has been used by\n\
\trecent viruses such as that described in\n\
\thttp://www.fsecure.com/v-descs/love.htm\n\
\tThis form of attachment has been used by\n\
\trecent viruses such as that described in\n\
\thttp://www.fsecure.com/v-descs/love.htm\n\
@@
-59,10
+59,10
@@
endif
# in emails. These were used as the basis for
# the ILOVEYOU virus and its variants
# [vb_regexp]
# in emails. These were used as the basis for
# the ILOVEYOU virus and its variants
# [vb_regexp]
-if $message_body matches "(?:Content-(?:Type:(?>\\\\s*)[\\\\w-]+/[\\\\w-]+|Disposition:(?>\\\\s*)attachment);(?>\\\\s*)(?:file)?name=|begin(?>\\\\s+)[0-7]{3,4}(?>\\\\s+))(\"[^\"]+\\\\.(?:vb[se]|ws[fh]|jse?|exe|com|shs|bat
)\"|[\\\\w.-]+\\\\.(?:vb[se]|ws[fh]|jse?|exe|com|shs|bat
))[\\\\s;]"
+if $message_body matches "(?:Content-(?:Type:(?>\\\\s*)[\\\\w-]+/[\\\\w-]+|Disposition:(?>\\\\s*)attachment);(?>\\\\s*)(?:file)?name=|begin(?>\\\\s+)[0-7]{3,4}(?>\\\\s+))(\"[^\"]+\\\\.(?:vb[se]|ws[fh]|jse?|exe|com|shs|bat
|scr|pif)\"|[\\\\w.-]+\\\\.(?:vb[se]|ws[fh]|jse?|exe|com|shs|bat|scr|pif
))[\\\\s;]"
then
fail text "This message has been rejected because it has\n\
then
fail text "This message has been rejected because it has\n\
- \ta
n apparent
ly executable attachment $1\n\
+ \ta
potential
ly executable attachment $1\n\
\tThis form of attachment has been used by\n\
\trecent viruses such as that described in\n\
\thttp://www.fsecure.com/v-descs/love.htm\n\
\tThis form of attachment has been used by\n\
\trecent viruses such as that described in\n\
\thttp://www.fsecure.com/v-descs/love.htm\n\
@@
-89,6
+89,8
@@
endif
# Latest MS Outhouse bug catching
# 0.08 19 July 2000
# Changed trigger length to 80 chars, fixed some spelling
# Latest MS Outhouse bug catching
# 0.08 19 July 2000
# Changed trigger length to 80 chars, fixed some spelling
+# 0.09 29 September 2000
+# More extensions... its getting so we should just allow 2 or 3 through
#
#### Install Notes
#
#
#### Install Notes
#
@@
-140,7
+142,9
@@
endif
# |exe
# |com
# |shs
# |exe
# |com
# |shs
-# |bat)
+# |bat
+# |scr
+# |pif)
# \" # end quote
# |[\w.-]+\. # unquoted filename.ext
# (?:vb[se] # list of extns
# \" # end quote
# |[\w.-]+\. # unquoted filename.ext
# (?:vb[se] # list of extns
@@
-149,9
+153,11
@@
endif
# |exe
# |com
# |shs
# |exe
# |com
# |shs
-# |bat)
+# |bat
+# |scr
+# |pif)
# ) # end of filename capture
# ) # end of filename capture
-# [\s;]
# trailing ;/space/newline
+# [\s;] # trailing ;/space/newline
#
#
### [End]
#
#
### [End]