Re: Blocking e.g. EXE

Jason Haar <[email protected]>
Newsgroups gmane.mail.qmail.scanner
Organization Trimble Navigation Ltd.
Message-ID <[email protected]>
Alex Ascherl - Qmailrocks wrote:
>   
>> I tested with Putty. I renamed putty.exe to putty.gif and sent it ...
>> It get through. If i send putty.exe it will be blocked.
>>     
> Sorry I did wrong. I renamed to putty.zip and it get through.
> If I name it putty.gif it will NOT come through.
>
> But why works ZIP?
>
>   
Because a lot of zip files are actually self-installing. i.e. they are
actually EXE's. So it can't treat that as suspicious as there are just
too many valid examples that have that characteristic


-- 
Cheers

Jason Haar
Information Security Manager, Trimble Navigation Ltd.
Phone: +64 3 9635 377 Fax: +64 3 9635 417
PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB FE1D 66D1


-------------------------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.