Re: Current TNEF support in exiscan

Tom Kistner <[email protected]> Fri, 04 Mar 2005 09:04:28 +0100
Newsgroups gmane.mail.exim.exiscan.user
Message-ID <[email protected]>
Eli wrote:

> So, I'm wondering if the current exiscan TNEF code in exim 4.50 is good and
> all known issues have been resolved?  Is it ok to allow TNEF attachments
> through?

The TNEF code has been removed. Three reasons:

1) The legal status of the code was unclear. Parts of the header file 
were ripped from a Microsoft SDK. This could not be included in Exim.

2) The code was a potential source of security problems.

3) Most (if not all) AV scanners deal with TNEF internally (just as they 
do with MIME), so there is no reason for the overhead of pre-decoding it).

If you still want to attempt to decode TNEF, grab a TNEF decoder binary 
from Freshmeat and call it with ${run on files in the MIME ACL.

/tom