Very long filenames are good signs of attacks against Microsoft e-mail packages (Reg No -2016%2.png)
Posted: 05 Apr 2017 14:04
Mailscanner blocked an attachment with:
so I checked: /etc/MailScanner/filename.rules.conf and the rule triggered is:MailScanner: Very long filenames are good signs of attacks against Microsoft e-mail packages (Reg No -2016%2.png)
not sure how a file name of Reg No -2016%2.png triggers that, is it the % character maybe?# Due to a bug in Outlook Express, you can make the 2nd from last extension
# be what is used to run the file. So very long filenames must be denied,
# regardless of the final extension.
deny .{150,} Very long filename, possible OE attack Very long filenames are good signs of attacks against Microsoft e-mail packages