Gentoo Forums
Gentoo Forums
Gentoo Forums
Quick Search: in
SOLVED Amavisd-New blocks .exe in .zip
View unanswered posts
View posts from last 24 hours

 
Reply to topic    Gentoo Forums Forum Index Networking & Security
View previous topic :: View next topic  
Author Message
kutte128
Apprentice
Apprentice


Joined: 18 May 2004
Posts: 173

PostPosted: Mon Jan 12, 2009 6:53 pm    Post subject: SOLVED Amavisd-New blocks .exe in .zip Reply with quote

hello,

my amavisd-new suddenly blocks exe-files in zips.
it worked fine some time ago.

this is my banned_filename_re:

Code:

$banned_filename_re = new_RE(


### BLOCKED ANYWHERE
# qr'^UNDECIPHERABLE$',  # is or contains any undecipherable components
  qr'^\.(exe-ms|dll)$',                   # banned file(1) types, rudimentary
# qr'^\.(exe|lha|tnef|cab|dll)$',         # banned file(1) types

### BLOCK THE FOLLOWING, EXCEPT WITHIN UNIX ARCHIVES:
# [ qr'^\.(gz|bz2)$'             => 0 ],  # allow any in gzip or bzip2
  [ qr'^\.(rpm|cpio|tar)$'       => 0 ],  # allow any in Unix-type archives

  qr'.\.(pif|scr)$'i,                     # banned extensions - rudimentary


### BLOCK THE FOLLOWING, EXCEPT WITHIN ARCHIVES:
 [ qr'^\.(zip|rar|arc|arj|zoo)$'=> 0 ],  # allow any within these archives

  qr'^application/x-msdownload$'i,        # block these MIME types
  qr'^application/x-msdos-program$'i,
  qr'^application/hta$'i,
                           # Windows Metafile file(1) type

  # block certain double extensions in filenames
  qr'\.[^./]*[A-Za-z][^./]*\.\s*(exe|vbs|pif|scr|bat|cmd|com|cpl|dll)[.\s]*$'i,


 qr'.\.(ade|adp|app|bas|bat|chm|cmd|com|cpl|crt|emf|exe|fxp|grp|hlp|hta|
        inf|ins|isp|js|jse|lnk|mda|mdb|mde|mdw|mdt|mdz|msc|msi|msp|mst|
        ops|pcd|pif|prg|reg|scr|sct|shb|shs|vb|vbe|vbs|
        wmf|wsc|wsf|wsh)$'ix,  # banned ext - long

);


where is the error?
my amavisd-new version is 2.6.1-r1.

i don't know exactly when this error first occured, but i testet it some time ago without problems

sincerely,
kutte128


Last edited by kutte128 on Fri Jan 16, 2009 2:14 pm; edited 1 time in total
Back to top
View user's profile Send private message
cach0rr0
Bodhisattva
Bodhisattva


Joined: 13 Nov 2008
Posts: 4123
Location: Houston, Republic of Texas

PostPosted: Fri Jan 16, 2009 1:11 pm    Post subject: Reply with quote

from what i can see...and i may be wrong

Code:

  qr'^\.(exe-ms|dll)$',                   # banned file(1) types, rudimentary


amavisd-new *does* unpack archives, so I'd imagine there's a fair chance it's unpacking the archive, passing the exe to `file`, and blocking.
should move that down to 'block except within archive'

that's my only guess. hope it's right!
Back to top
View user's profile Send private message
kutte128
Apprentice
Apprentice


Joined: 18 May 2004
Posts: 173

PostPosted: Fri Jan 16, 2009 2:13 pm    Post subject: Reply with quote

i commented out that entry and now it seems working again.
amavis blocks all .exe and allows them in zips again
Back to top
View user's profile Send private message
Display posts from previous:   
Reply to topic    Gentoo Forums Forum Index Networking & Security All times are GMT
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum