Page 1 of 1
		
			
				[BUG] Security rules can't block some hits from Gnutella
				
Posted: 
05 Jan 2010 16:51 
				by diztrancer
				String and regex rules can't block some hits from Gnutella:
Rule "\.au$" can't block "some shit superhit.au" from Gnutella.
Same for ".mov" or "." spam 

Why ???
 
			 
			
		
			
				Re: Security rules can't block some hits from Gnutella
				
Posted: 
05 Jan 2010 18:05 
				by raspopov
				Pleas don't use regexp rules for such simple cases, its about 100 times slower than basic content rules.
			 
			
		
			
				Re: Security rules can't block some hits from Gnutella
				
Posted: 
05 Jan 2010 18:23 
				by diztrancer
				I don't uses regex in my "production" filter. But ".au" string filter also can't block Gnutella ".au" spam 

 
			 
			
		
			
				Re: Security rules can't block some hits from Gnutella
				
Posted: 
06 Jan 2010 14:06 
				by cyko_01
				I have also noticed this. The files come up first without an extension and then are renamed with the extension .au or .mov . Also, the appropriate icons for those file-types are not displayed, only the generic question mark icons. I considered filtering all files without extensions but wasn't sure how to do it as a security filter
			 
			
		
			
				Re: Security rules can't block some hits from Gnutella
				
Posted: 
08 Jan 2010 18:08 
				by ailurophobe
				The filter is applied to the file name and if the file name returned by the search hit does not contain the extension... I think that if you add, delete, or edit any security rule, the filter should get applied to the file names, and these removed. If so there is a missing call to security in the code doing the renaming... I RG it would be metadata processing, which I also RG includes MIME type or something similar.
			 
			
		
			
				Re: Security rules can't block some hits from Gnutella
				
Posted: 
15 Jan 2010 00:01 
				by cyko_01
				
			 
			
		
			
				Re: [BUG] Security rules can't block some hits from Gnutella
				
Posted: 
31 Jan 2010 22:07 
				by ailurophobe
				It would still be Shareaza code doing the renaming without a security check, for a different reason, but that is irrelevant.
			 
			
		
			
				Re: [BUG] Security rules can't block some hits from Gnutella
				
Posted: 
01 Feb 2010 15:32 
				by ivan386
				Shareaza use file name from first hit even if it banned. If file have other hits without banned words Shareaza show this file whith name from firs hit.
			 
			
		
			
				Re: [BUG] Security rules can't block some hits from Gnutella
				
Posted: 
01 Feb 2010 18:53 
				by mojo85
				How about extensions, for the most part this doesn't change ... and what I witnessed is that a blocked extension sometimes still gets through.
In such a scenario, could a temp ban based on the hash of the file be created on the first hit of a matching result ... this way the filename is blocked and so is the hash temporarily?