commit fab67ce: [Minor] Add additional bad attachment types

twesterhever 40121680+twesterhever at users.noreply.github.com
Wed Oct 25 17:56:06 UTC 2023


Author: twesterhever
Date: 2023-10-22 20:25:31 +0000
URL: https://github.com/rspamd/rspamd/commit/fab67cebb9c1f29966477ba2eabf167435a9c337

[Minor] Add additional bad attachment types
- app: Executable Application, blocked in Outlook by default
- aspx: Active Server Page Extended, blocked in Outlook by default
- dll: Dynamic-link Library
- dqy: Microsoft Query File, blocking recommended in MS365
- iqy: ditto
- mht: MHTML File, often abused for phishing and exploit attempts
- mhtml: ditto
- oqy: Microsoft Query File, blocking recommended in MS365
- rqy: ditto
- slk: Microsoft Symbolic Link
- wim: Windows Imaging Format

---
 src/plugins/lua/mime_types.lua | 11 +++++++++++
 1 file changed, 11 insertions(+)

diff --git a/src/plugins/lua/mime_types.lua b/src/plugins/lua/mime_types.lua
index adf831716..c640d5e58 100644
--- a/src/plugins/lua/mime_types.lua
+++ b/src/plugins/lua/mime_types.lua
@@ -63,12 +63,23 @@ local settings = {
     shtml = 1,
     -- Have you ever seen that in legit email?
     ace = 4,
+    app = 1,
     arj = 2,
+    aspx = 1,
     asx = 2,
     cab = 3,
+    dll = 4,
+    dqy = 2,
+    iqy = 2,
+    mht = 2,
+    mhtml = 2,
+    oqy = 2,
+    rqy = 2,
     sfx = 2,
+    slk = 2,
     vst = 2,
     vss = 2,
+    wim = 2,
     -- Additional bad extensions from Gmail
     ade = 4,
     adp = 4,


More information about the Commits mailing list