commit fab67ce: [Minor] Add additional bad attachment types
twesterhever
40121680+twesterhever at users.noreply.github.com
Wed Oct 25 17:56:06 UTC 2023
Author: twesterhever
Date: 2023-10-22 20:25:31 +0000
URL: https://github.com/rspamd/rspamd/commit/fab67cebb9c1f29966477ba2eabf167435a9c337
[Minor] Add additional bad attachment types
- app: Executable Application, blocked in Outlook by default
- aspx: Active Server Page Extended, blocked in Outlook by default
- dll: Dynamic-link Library
- dqy: Microsoft Query File, blocking recommended in MS365
- iqy: ditto
- mht: MHTML File, often abused for phishing and exploit attempts
- mhtml: ditto
- oqy: Microsoft Query File, blocking recommended in MS365
- rqy: ditto
- slk: Microsoft Symbolic Link
- wim: Windows Imaging Format
---
src/plugins/lua/mime_types.lua | 11 +++++++++++
1 file changed, 11 insertions(+)
diff --git a/src/plugins/lua/mime_types.lua b/src/plugins/lua/mime_types.lua
index adf831716..c640d5e58 100644
--- a/src/plugins/lua/mime_types.lua
+++ b/src/plugins/lua/mime_types.lua
@@ -63,12 +63,23 @@ local settings = {
shtml = 1,
-- Have you ever seen that in legit email?
ace = 4,
+ app = 1,
arj = 2,
+ aspx = 1,
asx = 2,
cab = 3,
+ dll = 4,
+ dqy = 2,
+ iqy = 2,
+ mht = 2,
+ mhtml = 2,
+ oqy = 2,
+ rqy = 2,
sfx = 2,
+ slk = 2,
vst = 2,
vss = 2,
+ wim = 2,
-- Additional bad extensions from Gmail
ade = 4,
adp = 4,
More information about the Commits
mailing list