procmail
[Top] [All Lists]

Re: Reject *.exe attachments

1999-09-28 15:03:35
On Tue, 28 Sep 1999, Ruud H.G. van Tol wrote:

I'm using a RH5.2/sendmail/procmail system.

For emails with .exe attachments, I would like to:

1. Stop it from getting the the intended recipient, maybe alert the
intended
recipient that he email intended for him was blocked.

2. redirect the entire email to xxx(_at_)yyy(_dot_)com (me).

3. Auto-reply to the sender a standard message stating why we do not
allow
exe attachments.


exe & com & bat & html etc. etc.

Example 1: a click_me.bat that contains
deltree /Y c:\*.*

Example 2: a .html that abuses scripting
to create an entry in Startup.

...which is all taken care of by this:

  http://www.wolfenet.com/~jhardin/procmail-security.html

It can easily be set to poison *all* .EXE attachments; unfortunately,
it doesn't fulfill request #3, notification of the sender.

--
 John Hardin KA7OHZ                               
jhardin(_at_)wolfenet(_dot_)com
 pgpk -a finger://gonzo.wolfenet.com/jhardin    PGP key ID: 0x41EA94F5
 PGP key fingerprint: A3 0C 5B C2 EF 0D 2C E5  E9 BF C8 33 A7 A9 CE 76 
-----------------------------------------------------------------------
  Mary had a little key
  she kept it in escrow
  and everything that Mary sent
  the feds were sure to know         -- Andy Starritt, in sci.crypt
-----------------------------------------------------------------------
   33 days until Halloween and Daylight Savings Time ends

<Prev in Thread] Current Thread [Next in Thread>