full-disclosure - Religion... was RE: Re: January 15 is Personal Firewall Day, help the cause

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <400B3C83.4000000@well.com>
From: caferace at well.com (Jim Race)
Subject: Religion... was RE: Re: January 15 is Personal
 Firewall Day, help the cause

David F. Skoll wrote:

> I have a very powerful heuristic on my mail server:  I discard anything
> with an .exe attachment.

That ain't near enough. If you *really* want to get rid of Win32 stuff, try:

.386  	.bat  	.bin  	.cmd  	.com  	.cpl
.exe 	.lnk 	.pif 	.scr 	.shb 	.vbs

and if you want to be even more aggressive, add:

.ade  	.adp  	.bas  	.chm  	.crt  	.dll  	.dot
.eml 	.hlp 	.hta 	.inf 	.ins 	.isp 	.js
.jse 	.mdb 	.mde 	.msc 	.msi 	.msp 	.mst
.ocx 	.pcd 	.pif 	.reg 	.sct 	.shs 	.shs
.url 	.vb 	.vbe 	.wsc 	.wsf 	.wsh 	

Of course, that will nuke a lot of stuff you don't want to lose, 
especially for someone interested in security.

But it is one hell of a housecleaner. :)

-jim