Attachments are not scanned - no help from anybody?
Magda Hewryk
MHewryk at SYMCOR.COM
Wed Jan 8 20:01:36 GMT 2003
Magda Hewryk
<MHewryk at SYMCOR.CO To: MAILSCANNER at JISCMAIL.AC.UK
M> cc:
Sent by: Subject: Attachments are not scanned
MailScanner
mailing list
<MAILSCANNER at JISCM
AIL.AC.UK>
01/08/2003 01:12
PM
Please respond to
MailScanner
mailing list
Hi,
I'm trying to send the binary with the extension "exe" but for some reason
MailScanner doesn't report it as a spam or an infected email.
Nothing is put is the quarantine queue and I'm not getting any report....
My filename.rules.conf file is set up properly, it denies .exe and it is
activated in MailScanner.conf.
What is wrong here?
Some configurations from my MailScanner.conf
=====================================
Virus Scanning = no
Filename Rules = /etc/MailScanner/filename.rules.conf
Quarantine Infections = yes
Deleted Bad Filename Message Report =
/etc/MailScanner/reports/en/deleted.filename.message.txt
Stored Bad Filename Message Report =
/etc/MailScanner/reports/en/stored.filename.message.txt
Some logs:
==========
# mail -v mhewryk < f-prot.exe
1.) binary sent with .exe extension
Jan 8 12:58:43 tonka MailScanner[11670]: New Batch: Forwarding 1 unscanned
messages, 28449 bytes
Jan 8 12:58:43 tonka MailScanner[11670]: Spam Checks: Starting
Jan 8 12:58:43 tonka sendmail[11924]: h08Hwg39011924: to=mhewryk,
ctladdr=root (0/0), delay=00:00:01, xdelay=00:00:01, mailer=relay,
pri=30029, relay=localdomain.localhost. [127.0.0.1], dsn=2.0.0, stat=Sent
(h08Hwg32011930 Message accepted for delivery)
2.) binary sent with .exe extension and SPAM subject line
Jan 8 13:01:18 tonka MailScanner[11756]: New Batch: Forwarding 1 unscanned
messages, 28488 bytes
Jan 8 13:01:18 tonka MailScanner[11756]: Spam Checks: Starting
Jan 8 13:01:58 tonka MailScanner[11756]: Message h08I1F32012337 from
127.0.0.1 (tonka.aberfoyle.com) is spam, SpamAssassin (score=5.6, required
5, BALANCE_FOR_LONG_20K, FREE_MONEY, NO_MX_FOR_FROM, SPAM_PHRASE_00_01,
SUBJ_ALL_CAPS, SUBJ_FREE_CAP, SUB_FREE_OFFER, SUPERLONG_LINE,
UPPERCASE_25_50)
Jan 8 13:01:58 tonka MailScanner[11756]: Spam Checks: Found 1 spam
messages
Jan 8 13:01:58 tonka MailScanner[11756]: Spam Actions: message
h08I1F32012337 actions are deliver
Jan 8 13:01:58 tonka MailScanner[11756]: Unscanned: Delivered 1 messages
Jan 8 13:01:59 tonka MailScanner[11756]: Virus and Content Scanning:
Starting
Jan 8 13:02:00 tonka sendmail[12502]: h08I1F32012337: to
=<mhewryk at tonka.aberfoyle.com>, ctladdr=<root at tonka.aberfoyle.com> (0/0),
delay=00:00:44, xdelay=00:00:00, mailer=local, pri=120367, dsn=2.0.0,
stat=Sent
Thanks,
Magda Hewryk
--------------------------------
Mid-Range Systems
RSP: 905-273-1637
CELL: 416-948-4427
More information about the MailScanner
mailing list