This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

How to Block Flash embedded Excel attachments ?

Hi All, First of all let me wish all of you a Happy and prosperous “2010”.

I have implemented PureMessage for Unix 5.5.9 as the email gateway. I’’’’m very happy with PMX performance but have a issue for which I need advice.

I am filtering unwanted attachments using “pmx_attachment_true_filetype” scanning and I’’’’m blocking attachments as per the MIME types. However this technique fails to detect Flash embedded Microsoft excel attachments. I Want to block users sending excel files with flash embedded games and videos but don’’’’t want to block normal excel content.

Greatly appreciated if someone can advice me on how to achieve my requirement…

Thanks in advance,

Pubudu.

:631


This thread was automatically locked due to age.
Parents

  • Hi Mark,

    Thanks for the feedback. I followed your advice but looks like PMX cannot see a difference between the two files. Please see below outputs. Is there anything else I can try??

    Many Thanks,
    Pubudu.

    Normal Excel file:


    Bcs.xls:
        extensions:
            .ole2
            .xls
            .xlt
        filetypes:
            Spreadsheet/Microsoft Excel-OLE
        mime types:
            application/ms-excel
            application/msexcel
            application/vnd.ms-excel
            application/x-msexcel
            application/x-ole2


    Excel file with Flash:

    red_wine.xls:
        extensions:
            .ole2
            .xls
            .xlt
        filetypes:
            Spreadsheet/Microsoft Excel-OLE
        mime types:
            application/ms-excel
            application/msexcel
            application/vnd.ms-excel
            application/x-msexcel
            application/x-ole2




    Diff output of two files:

    Please note that only file names are different.


    [root@pmx tmp]# diff  normal.txt   FlashExcel.txt
    1c1
    < Bcs.xls:
    ---
    > red_wine.xls:
    [root@pmx tmp]

    :641
Reply

  • Hi Mark,

    Thanks for the feedback. I followed your advice but looks like PMX cannot see a difference between the two files. Please see below outputs. Is there anything else I can try??

    Many Thanks,
    Pubudu.

    Normal Excel file:


    Bcs.xls:
        extensions:
            .ole2
            .xls
            .xlt
        filetypes:
            Spreadsheet/Microsoft Excel-OLE
        mime types:
            application/ms-excel
            application/msexcel
            application/vnd.ms-excel
            application/x-msexcel
            application/x-ole2


    Excel file with Flash:

    red_wine.xls:
        extensions:
            .ole2
            .xls
            .xlt
        filetypes:
            Spreadsheet/Microsoft Excel-OLE
        mime types:
            application/ms-excel
            application/msexcel
            application/vnd.ms-excel
            application/x-msexcel
            application/x-ole2




    Diff output of two files:

    Please note that only file names are different.


    [root@pmx tmp]# diff  normal.txt   FlashExcel.txt
    1c1
    < Bcs.xls:
    ---
    > red_wine.xls:
    [root@pmx tmp]

    :641
Children
No Data