[Esa-l] Double Extensions fails

Dave Clendenan dave at monty.bc.ca
Wed Feb 14 07:44:07 PST 2001


Ah, I was mis-counting the dots

thanks

Dave

-----Original Message-----
From: esa-l-admin at spconnect.com [mailto:esa-l-admin at spconnect.com]On
Behalf Of Mark Tiramani
Sent: Wednesday, February 14, 2001 7:30 AM
To: Email Security Announce list
Subject: RE: [Esa-l] Double Extensions fails


> It still looks to me like blocking double extensions will
> trap 'filename.date.extension'

Not with John's recommended globs as in:
*.[a-z][a-z][a-z0-9].[a-z0-9][a-z0-9][a-z0-9]
 
This means:
0 or many | dot | alpha | alpha | alphanumeric | dot | alphanumeric | alphanumeric | alphanumeric

Each [a-z] represents/matches a single alpha character, so  .[a-z][a-z][a-z].  mathes any 3 
alpha chars sandwiched between two dots.

'filename.dat.exe'
would be trapped of course.

Mark

Mark Tiramani
FREDO Internet Services
markjt at fredo.co.uk
_______________________________________________
E-mail Security Announce list mailing list
E-mail Security Announce list at spconnect.com
http://www.spconnect.com/mailman/listinfo/esa-l




More information about the esd-l mailing list