Block executable files which is compressed using gzip
"Chaminda Indrajith" <indrajith-pcGTK+spy4daa/[email protected]>
| Newsgroups | gmane.mail.virus.mailscanner |
|---|---|
| Message-ID | <[email protected]> |
Hi, Could you let me know how to block executable files which is compressed using gzip. One of the Mail contains attachment which compressed using gzip. When I strip the attachment it contains a "Pdf 00231145 Swift Copy.gz" file. [root@mail msg-1611056831-18887-0]# ls msg-18887-1.txt msg-18887-2.html Pdf 00231145 Swift Copy.gz When I unzip it using gunzip, it is just a file without an extension. But it is an executable file. [root@mail msg-1611056831-18887-0]# gunzip Pdf\ 00231145\ Swift\ Copy.gz [root@mail msg-1611056831-18887-0]# ls msg-18887-1.txt msg-18887-2.html "Pdf 00231145 Swift Copy" [root@mail msg-1611056831-18887-0]# file Pdf\ 00231145\ Swift\ Copy Pdf 00231145 Swift Copy: gzip compressed data, was "Pdf 00231145 Swift Copy.exe", from FAT filesystem (MS-DOS, OS/2, NT), last modified: Mon Jan 18 05:25:12 2021 This file contains a Virus. So, how can I block such files (executable files types without any extension) in MailScanner Thanks Chaminda Indrajith -- MailScanner mailing list mailscanner-qhrM8SXbD5JTOyd/[email protected] http://lists.mailscanner.info/mailman/listinfo/mailscanner