RE: Current TNEF support in exiscan

"Eli" <[email protected]> Fri, 4 Mar 2005 15:25:27 -0500
Newsgroups gmane.mail.exim.exiscan.user
Message-ID <004301c520f8$510d94f0$ca00000a@eli>
I wrote:
> I think I'll be blocking TNEF as well - did a bit of=20
> searching around and apparently it's not even really
> required, so out it goes.

One more thing on the subject of TNEF attachments.  I have an ACL =
statement
that I got from someone else (that posted it) and they block based on 2
things:

1) $mime_content_type being application/ms-tnef
2) $mime_filename being winmail.dat

Obviously #1 is going to detect 100% of the TNEF attachments, but I =
wonder
why you would outright block all email attachments named "winmail.dat"  =
Have
there been cases where a TNEF file has been sent as winmail.dat but did =
not
use a mime type of application/ms-tnef?  If so, wouldn't such a file go =
as
unknown even though it's name was winmail.dat?  Just a bit weary with =
adding
#2 as a condition for dropping an attachment - seems a bit "out there".

Eli.