Page 1 of 1
[BUG] Security rules can't block some hits from Gnutella
Posted:
05 Jan 2010 16:51
by diztrancer
String and regex rules can't block some hits from Gnutella:
Rule "\.au$" can't block "some shit superhit.au" from Gnutella.
Same for ".mov" or "." spam
Why ???
Re: Security rules can't block some hits from Gnutella
Posted:
05 Jan 2010 18:05
by raspopov
Pleas don't use regexp rules for such simple cases, its about 100 times slower than basic content rules.
Re: Security rules can't block some hits from Gnutella
Posted:
05 Jan 2010 18:23
by diztrancer
I don't uses regex in my "production" filter. But ".au" string filter also can't block Gnutella ".au" spam
Re: Security rules can't block some hits from Gnutella
Posted:
06 Jan 2010 14:06
by cyko_01
I have also noticed this. The files come up first without an extension and then are renamed with the extension .au or .mov . Also, the appropriate icons for those file-types are not displayed, only the generic question mark icons. I considered filtering all files without extensions but wasn't sure how to do it as a security filter
Re: Security rules can't block some hits from Gnutella
Posted:
08 Jan 2010 18:08
by ailurophobe
The filter is applied to the file name and if the file name returned by the search hit does not contain the extension... I think that if you add, delete, or edit any security rule, the filter should get applied to the file names, and these removed. If so there is a missing call to security in the code doing the renaming... I RG it would be metadata processing, which I also RG includes MIME type or something similar.
Re: Security rules can't block some hits from Gnutella
Posted:
15 Jan 2010 00:01
by cyko_01
Re: [BUG] Security rules can't block some hits from Gnutella
Posted:
31 Jan 2010 22:07
by ailurophobe
It would still be Shareaza code doing the renaming without a security check, for a different reason, but that is irrelevant.
Re: [BUG] Security rules can't block some hits from Gnutella
Posted:
01 Feb 2010 15:32
by ivan386
Shareaza use file name from first hit even if it banned. If file have other hits without banned words Shareaza show this file whith name from firs hit.
Re: [BUG] Security rules can't block some hits from Gnutella
Posted:
01 Feb 2010 18:53
by mojo85
How about extensions, for the most part this doesn't change ... and what I witnessed is that a blocked extension sometimes still gets through.
In such a scenario, could a temp ban based on the hash of the file be created on the first hit of a matching result ... this way the filename is blocked and so is the hash temporarily?