[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Some JPEGs are attachments are shown, some are missing



At 14:53 -0500 2003-09-16, Earl Hood wrote:
>It is MIMEEXCS.
>and it is excluding application/* data.
>You need to reset MIMEEXCS as shown in one of previous messages.

How is this happening?
MIMEEXCS defines the list of content-types to exclude from processing.
I don't have MIMEEXCS in my .mrc file; thus, how is _anything_ being excluded
for me?
The default is documented as "Nil".

I _had_ MIMEEXCS set one time, but removed it from my .mrc file weeks ago.
How is mhonarc still using a setting I do not provide?

How do I "fix" a setting I currently do not have?

If I insert a MIMEEXCS resource setting that doesn't mention
application/octet-stream, will it "override" whatever is stuck in MhonARC's
database??

Do I need to run a command to force the database to reset itself from the
current .mrc file??

>One solution is to use the inlineexts and usenameext options to
>m2h_external::filter:
>
>  <MIMEArgs>
>  m2h_external::filter; inlineexts="jpg" usenameext
>  </MIMEArgs>
>
>Unfortunately, such a solution can make your archive vulnerable to
>attacks (see the MIMEFILTERS page and the m2h_external::filter and
>the Security section of the FAQ for more information).

I don't understand. I read the Seurity FAQ; the section on "Why doesn't
MHonArc, by default, use the specified filename when saving attachments?
seemed the most relevant."  - from this, it would appear _safer_ to save a
.jpeg as a .jpeg (which is not executable) than as something else, e.g. .bin,
which _could be_ executable!



-- 
- Vicki

Vicki Brown     ZZZ                   Journeyman Sourceror:
P.O. Box 1269      zz  |\     _,,,---,,_         Scripts & Philtres
San Bruno, CA       zz /,`.-'`'    -.  ;-;;,_     Perl, Unix, MacOS
94066     USA         |,4-  ) )-,_. ,\ ( `'-'   http://philtres.com
mailto:vlb@cfcl.com  '---''(_/--'  `-'\_)   http://www.cfcl.com/vlb


[Index of Archives]     [Bugtraq]     [Yosemite News]     [Mhonarc Home]