[Rspamd-Users] Multimap filter "extension" does recognize .laf as .exe

[Thomas Plant]

Am 07.05.2020 um 09:08 schrieb Alexander Moisseev via Users:
> 06.05.2020 17:11, Thomas Plant via Users пишет:
>>
>> Our Customer swears that there is no exe contained in the file, it
>> merely contains "translations of labeling of a switch cabinet".
>>
> Do they really know internal structure of the .laf file?
> What if it is a kind of archive containing the 'detected.exe' file?
This is what I was thinking too. Asked to investigate our customer at
the software company for more details about this file they generate.
We will see if he gets an answer.

Out of my curiosity, how does rspamd detect if there is a executable
file in a file?

Thanks,
Thomas