Disabling certain attachment types

[jlmacho]

Hi,
I would like to know how I can disable certain types of attachments, there are certain file extensions that I want to disable.
It's possible?
Can somebody help me?
Thanks,
Regards

[reneeb]

What do you mean with "disable"? Do you want to filter attachments from incoming mails? Do you want agents to not upload attachments of some types?

[jlmacho]

I want to prevent certain attachments from being added to OTRS (.exe, .sh for example)

[reneeb]

To avoid those attachments in incoming mails, you could write your own postmaster filter module. For the agents stuff, you should train your agents, and you can change the code of all modules that allow uploading files....

[wurzel]

Hi,

for incoming E-Mail I would use a Content Filtering before the E-Mail arrives OTRS.

Found this on
https://stackoverflow.com/questions/568 ... -on-apache
for .htaccess

Code: Select all

<FilesMatch "(^#.*#|\.(exe|bak|config|dist|fla|inc|ini|log|psd|sh|sql|sw[op])|~)$">
    Order allow,deny
    Deny from all
    Satisfy All
</FilesMatch>

Maybe this works? (untested)

regards,
Florian

[reneeb]

You .htaccess stuff is only for accessing .exe files. That doesn't affect the possibility to attach .exe files to tickets...

[wurzel]

Hi,

mhh... did not know that.
There should be an upload restriction possible, too. Or is a contenfilter/proxy needed for this?

Or is a module for OTRS available somewhere?

Flo

[pfipf]

Hi,

I'm facing the same problem. For security reasons I have to disallow various attachment file types.
Are there any plans for implementing such a feature in future versions?
I guess this would be appreciated by many admins.

Thanks.

[jojo]

You can submit your idea here: https://otrsteam.ideascale.com/

[pfipf]

Thank you JoJo for your quick reply.
I submitted this idea as suggested: https://otrsteam.ideascale.com/a/idea-v2/546212
I believe this thread can be closed.