Attachments are not scanned - no help from anybody?

Magda Hewryk MHewryk at SYMCOR.COM
Wed Jan 8 20:01:36 GMT 2003


                    Magda Hewryk
                    <MHewryk at SYMCOR.CO        To:     MAILSCANNER at JISCMAIL.AC.UK
                    M>                        cc:
                    Sent by:                  Subject:     Attachments are not scanned
                    MailScanner
                    mailing list
                    <MAILSCANNER at JISCM
                    AIL.AC.UK>


                    01/08/2003 01:12
                    PM
                    Please respond to
                    MailScanner
                    mailing list










Hi,

I'm trying  to send the binary with the extension "exe" but for some reason
MailScanner doesn't report it as a spam or  an infected email.
Nothing is put is the quarantine queue and I'm not getting any report....

My filename.rules.conf file is set up properly, it denies .exe and it is
activated in MailScanner.conf.
What is wrong here?

Some configurations from my MailScanner.conf
=====================================
Virus Scanning = no
Filename Rules = /etc/MailScanner/filename.rules.conf
Quarantine Infections = yes
Deleted Bad Filename Message Report =
/etc/MailScanner/reports/en/deleted.filename.message.txt
Stored Bad Filename Message Report =
/etc/MailScanner/reports/en/stored.filename.message.txt

Some logs:
==========

# mail -v mhewryk < f-prot.exe

1.) binary sent with .exe extension
Jan  8 12:58:43 tonka MailScanner[11670]: New Batch: Forwarding 1 unscanned
messages, 28449 bytes
Jan  8 12:58:43 tonka MailScanner[11670]: Spam Checks: Starting
Jan  8 12:58:43 tonka sendmail[11924]: h08Hwg39011924: to=mhewryk,
ctladdr=root (0/0), delay=00:00:01, xdelay=00:00:01, mailer=relay,
pri=30029, relay=localdomain.localhost. [127.0.0.1], dsn=2.0.0, stat=Sent
(h08Hwg32011930 Message accepted for delivery)

2.) binary sent with .exe  extension and SPAM subject line
Jan  8 13:01:18 tonka MailScanner[11756]: New Batch: Forwarding 1 unscanned
messages, 28488 bytes
Jan  8 13:01:18 tonka MailScanner[11756]: Spam Checks: Starting
Jan  8 13:01:58 tonka MailScanner[11756]: Message h08I1F32012337 from
127.0.0.1 (tonka.aberfoyle.com) is spam, SpamAssassin (score=5.6, required
5, BALANCE_FOR_LONG_20K, FREE_MONEY, NO_MX_FOR_FROM, SPAM_PHRASE_00_01,
SUBJ_ALL_CAPS, SUBJ_FREE_CAP, SUB_FREE_OFFER, SUPERLONG_LINE,
UPPERCASE_25_50)
Jan  8 13:01:58 tonka MailScanner[11756]: Spam Checks: Found 1 spam
messages
Jan  8 13:01:58 tonka MailScanner[11756]: Spam Actions: message
h08I1F32012337 actions are deliver
Jan  8 13:01:58 tonka MailScanner[11756]: Unscanned: Delivered 1 messages
Jan  8 13:01:59 tonka MailScanner[11756]: Virus and Content Scanning:
Starting
Jan  8 13:02:00 tonka sendmail[12502]: h08I1F32012337: to
=<mhewryk at tonka.aberfoyle.com>, ctladdr=<root at tonka.aberfoyle.com> (0/0),
delay=00:00:44, xdelay=00:00:00, mailer=local, pri=120367, dsn=2.0.0,
stat=Sent


Thanks,

Magda Hewryk
--------------------------------
Mid-Range Systems
RSP:   905-273-1637
CELL:   416-948-4427



More information about the MailScanner mailing list