Re: Current TNEF support in exiscan
Tom Kistner <[email protected]> Fri, 04 Mar 2005 09:04:28 +0100
| Newsgroups | gmane.mail.exim.exiscan.user |
|---|---|
| Message-ID | <[email protected]> |
Eli wrote:
> So, I'm wondering if the current exiscan TNEF code in exim 4.50 is good and
> all known issues have been resolved? Is it ok to allow TNEF attachments
> through?
The TNEF code has been removed. Three reasons:
1) The legal status of the code was unclear. Parts of the header file
were ripped from a Microsoft SDK. This could not be included in Exim.
2) The code was a potential source of security problems.
3) Most (if not all) AV scanners deal with TNEF internally (just as they
do with MIME), so there is no reason for the overhead of pre-decoding it).
If you still want to attempt to decode TNEF, grab a TNEF decoder binary
from Freshmeat and call it with ${run on files in the MIME ACL.
/tom