Jimmy's weblog

For anyone using Samba to provide Windows file sharing, the following directives will help stop the spread of network share viruses.

# Don't allow access to any of the following files.
# Useful for preventing the spread of virus infections on your server
# should a Windows-connected client become infected.
# The last match bit prevents accessing files with a CLSID
# in its file extension
veto files = /*.exe/*.dll/*.com/*.vbs/*.{*}/

# You could uncomment the next line to use a more restrictive set of
# unallowed file extensions (see Microsoft KB 290497)
; veto files = /*.scr/*.scf/*.sct/*.pif/*.exe/*.bas/*.bat/*.com/*.ade/
*.adp/*.asp/*.asx/*.chm/*.cmd/*.cpl/*.crt/*.hta/*.hlp/*.inf/*.ins/
*.isp/*.js/*.jse/*.lnk/*.mda/*.mde/*.mdt/*.mdw/*.mdz/*.msc/*.msi/
*.msp/*.mst/*.ops/*.pcd/*.prf/*.reg/*/shb/*.shs/*.url/*.vb/
*.vbs/*.vbe/*.wsc/*.wsf/*.wsh/*.{*}/lost+found/

# Hide the following files; the client can still choose to alter
# their view settings to show hidden files.
hide files = /example.txt/*.ico/