How to restrict certain file formats from being uploaded?

[pakistanihaider]

Hi everyone
i am little stuck in whm settings..
i mean i can make account for clients and set packages..
but i want to know..how to restrict my clients to not upload certain file formats..

like i dont want my clients to upload .exe files on server.. where can i find that feature..or what should i do that my clients should not be able to upload certain file formats..

Kind Regards
Haider

[LinuxTechie]

Hello Haider,

There are really no tools to restrict uploading of such files. One thing you can do is to make a script to notify when a .exe file gets uploaded.

Mod security is a web based firewall and it won't help in restricting the uploads.

[pakistanihaider]

hmmm..so how do we can prevent clients from abusing the service..

cuz it will be hard to daily check on all clients what they are doing on their server..

And that notifying script will be great too..is there any script out there like that??

[LinuxTechie]

Hello Haider,

Yes, you are right. It is difficult to scan the server daily. But you can perform a clamscan/maldetect weekly to find the vulnerable files.

If needed a custom script can be made to find the particular pattern uploads.

[Infopro]

This link may be useful: ConfigServer eXploit Scanner (cxs)