[Esd-l] Stripping Attachments?

Paul Thomas paul at cuenet.com
Sat Jan 12 20:46:00 PST 2002


On Sat, 12 Jan 2002, John D. Hardin wrote:

> > I thought for a file to be stripped, the extention must appear in
> > the MANGLE_EXTENSIONS list.
> 
> That is true.
> 
> HOWEVER: Microsoft document extensions (such as RTF) have special
> treatment. They will always be eligible for stripping and poisoning,
> even if they don't appear in the MANGLE list. This is so they can be
> scanned for macros even though their filenames aren't being mangled.
> 
> Take *.RTF (etc.) out of your strip file if you don't want them
> stripped.

Ah, this is the trouble I'm having then. What I'm trying to accomplish
is, I run some listservers on my mailserver. One of the listowners
wants to have all file types except for gif, jpg, txt, eml, and rtf
to be stripped out. So I thought I might try a apply the Sanitizer's
Stripped Executable feature to accomplish this as I run the incoming
list mail through the Sanitizer anyway. 

So for the moment I have setup a separate /etc/procmailrc-ListName
file for the list. I was hoping to work up a scheme with
STRIPPED_EXECUTABLES="/etc/procmail/stripped" containing all possible
file extentions and then on a per list (or whatever else) basis, use
the:

:0
              * ^From:.*<[a-z0-9]+ at mydomain.com>
              * ^To:.*<[a-z0-9]+ at mydomain.com>
              {

MANGLE_EXTENSIONS='html?|exe|com|cmd|bat|pif|sc[rt]|lnk|dll|ocx|dot|xl[wt]|p[po]t|rtf|vb[se]?|hta|p[lm]|sh[bs]|hlp|chm|eml|ws[cfh]|ad[ep]|jse?|md[abew]|ms[ip]|reg|asd|cil|pps|asx|wm[szd]|vcf|nws|\{[-0-9a-f]+\}'
              }

to select what file extention(s) to strip. What are the other MicroSoft
extentions are hardwired in html-trap.procmail that I should remove
from the STRIPPED_EXECUTABLES="/etc/procmail/stripped"?

Guess I'll just have to do an individual:

/etc/procmailrc-ListName

configuration for any future custom stripping.

Thanks,

--Paul 

--
"Yesterday's the past and tomorrow's the future. Today is a gift - which
is why they call it the present."
-Bill Keane



More information about the esd-l mailing list