Symbian application MIME type blocking is not working

Symbian application MIME type blocking is not working SearchSearch
Author Message
David Chkhartishvili
New member
Username: Datoch

Post Number: 38
Registered: 06-2004
Posted on Friday, January 06, 2006 - 11:29 am:   

Hi Bryce,

We have blocked Symbian mime type as described in documantation, but inspite of that, seems like it doesn't work.
Please have a lokk at our mmsblock file and infected mms.
application/octet-streamInfected MMS
00017617.MMS (27.5 k)
text/plainMMSBLOCK.TXT
MMSBLOCK.TXT (0.1 k)
Bryce Norwood - NowSMS Support
Board Administrator
Username: Bryce

Post Number: 5429
Registered: 10-2002
Posted on Friday, January 13, 2006 - 09:49 pm:   

Hi David,

It worked for me. (I'm relieved to say.)

So I guess we need to figure out what is different in your setup.

The only thing that I could see being a potential problem is that this functionality relies on the content adaptation engine being functional (Enable Dynamic Image + Audio Conversion), as described here:

http://support.nowsms.com/discus/messages/53/8795.html

That said, this conversion is not triggered if the UAProf file for the mobile phone is not accessible.

Does your MMSC have internet access to be able to download UAProf files? (If it doesn't, there is a UAProfProxy setting that can be used, see http://support.nowsms.com/discus/messages/53/8153.html)

Or maybe there is a problem with a particular UAProf header for a particular mobile phone? It would probably be a good idea to capture an MMSCDEBUG.LOG of this message being downloaded.

Still, it is something of a security hole that these files don't get blocked if the UAProf file for the receiving mobile phone is inaccessible or missing. To close that hole, install a default UAProf file.

The way to do this is to create/edit a file named UAMAP.INI in the UAPROF subdirectory of the NowSMS installation. Put the following content in that file:

[UAMAP]
*=default.xml

Then you will need to create a default.xml file in the UAPROF directory. You could download the following from our web site: http://www.nowsms.com/nowsms.xml

So my immediate suggestion would be to do this, which should close the hole. Then, the next step would be to figure out why the UAProf files aren't being downloaded.

-bn
David Chkhartishvili
New member
Username: Datoch

Post Number: 39
Registered: 06-2004
Posted on Monday, January 16, 2006 - 05:26 am:   

Hi bryce,

We have configuratin you described and we can get UAProfs.
Problem is, that virus takes records from phone book and sends MMSs to them, they doesn't reach destination number (because of NowSMS mime type blocking), but originating customers are charged. Could we reject such mime types and do not generate accounting callbacks?
Bryce Norwood - NowSMS Support
Board Administrator
Username: Bryce

Post Number: 5485
Registered: 10-2002
Posted on Friday, January 27, 2006 - 11:04 pm:   

Hi David,

I see your point. We can stop the message from getting there through us ...

But if someone got the virus from some other path (bluetooth ... other MMSC), you'd want to try to stop them from originating the infected messages if possible.

I don't have a quick solution for you, but this has been referred back to engineering for further investigation.

-bn