Ask for block .jpeg.exe include in .zip extension.

[Watthanachai Kekhua via amavis-users]

Dear Mr.Benedict
CC: Amavisd ML.

	Thank you for your feedback , In my system also enable for banned file checked.
	Sure I have enable for unzip in below configure,

$banned_filename_re = new_RE(
	####Add new , Block *.jpeg.exe 
qr'.\.( cpl|jpeg|)\.exe$'i,   # block exe double extension

@decoders = (
	 ['zip',  \&do_unzip], 

But after test email with "xxx.jpeg.exe.zip" in maillog show could send to mailbox normally.

##Log on maillog show "Passed CLEAN"
Aug 30 10:23:37 SMTP00 amavis[10250]: (10250-01) Passed CLEAN {RelayedInternal},

So if have another recommend on  configure , Please ASAP .


Please do not hesitate to contact us , If you have any questions .
Best Regards.
################################
#  Watthanachai KEKHUA (Golf)
#  Operation And Maintenance Department (OAM)
#  Tel: 02-2367227 Ext. 1624
#  NTT Communications (Thailand) Co., Ltd.
#################################

DISCLAIMER :
This email is for the use of the intended recipient(s) only. 
If you have received this email in error, please notify the sender immediately and then delete it. 
If you are not the intended recipient, you must not keep, use, disclose, copy or distribute this email without the author's prior permission. 
We have taken precautions to minimise the risk of transmitting software viruses, but we advise you to carry out your own virus checks on any attachment to this message.
We cannot accept liability for any loss or damage caused by software viruses.
The information contained in this communication may be confidential and may be subject to the attorney-client privilege. 
If you are the intended recipient and you do not wish to receive similar electronic messages from us in future then please respond to the sender to this effect.

-----Original Message-----
From: Benedict White [mailto:Benedict.White at cse-ltd.co.uk] 
Sent: Thursday, August 29, 2013 6:55 PM
To: amavis-users at amavis.org
Cc: Watthanachai Kekhua
Subject: RE: Ask for block .jpeg.exe include in .zip extension.

From: amavis-users [mailto:amavis-users-bounces+benedict.white=cse-ltd.co.uk at amavis.org] On Behalf Of Watthanachai Kekhua via amavis-users
Sent: 29 August 2013 12:15
To: amavis-users at amavis.org
Subject: Ask for block .jpeg.exe include in .zip extension.
>                    Hello everyone on Amavis Mailing list .
>
>                    I found some spam-mail with zip extension and in file name "Your_Friend_New_photos-updates_id[random number].zip". 
>                    All ZIP files had a file called "Your_Friend_New_photos-updates.jpeg.exe" inside them.
>                    So if we would like to block this kind of spam-mail like condition below .
>
>Condition :  In my mail server need to allow attach file with extension 
>for ".exe" and normal ".zip" file, but would like to block this kind of spam mail .zip include .jpeg.exe like "Your_Friend_New_photos-updates.jpeg.exe"
>
>How could we customized configure rule to block this kind of issue on 
>amavisd.conf ? (need some recommend on you )
>
The files you are trying to block would be covered by the banned files checks.

Are the banned file checks enables, and do you have the relevant programs to unzip the banned attachments?



Kindest regards,

Benedict White