Attachments are not scanned

Julian Field mailscanner at ecs.soton.ac.uk
Wed Jan 8 23:36:43 GMT 2003


At 18:12 08/01/2003, you wrote:
>Hi,
>
>I'm trying  to send the binary with the extension "exe" but for some reason
>MailScanner doesn't report it as a spam or  an infected email.
>Nothing is put is the quarantine queue and I'm not getting any report....
>
>My filename.rules.conf file is set up properly, it denies .exe and it is
>activated in MailScanner.conf.
>What is wrong here?
>
>Some configurations from my MailScanner.conf
>=====================================
>Virus Scanning = no

Due to nasty historical reasons, "Virus Scanning = no" switches off the
virus scanning *and* the attachment filename checking. Sorry about that.
What you need is
         Virus Scanning = yes
         Virus Scanners = none

>Filename Rules = /etc/MailScanner/filename.rules.conf
>Quarantine Infections = yes
>Deleted Bad Filename Message Report =
>/etc/MailScanner/reports/en/deleted.filename.message.txt
>Stored Bad Filename Message Report =
>/etc/MailScanner/reports/en/stored.filename.message.txt
>
>Some logs:
>==========
>
># mail -v mhewryk < f-prot.exe
>
>1.) binary sent with .exe extension
>Jan  8 12:58:43 tonka MailScanner[11670]: New Batch: Forwarding 1 unscanned
>messages, 28449 bytes
>Jan  8 12:58:43 tonka MailScanner[11670]: Spam Checks: Starting
>Jan  8 12:58:43 tonka sendmail[11924]: h08Hwg39011924: to=mhewryk,
>ctladdr=root (0/0), delay=00:00:01, xdelay=00:00:01, mailer=relay,
>pri=30029, relay=localdomain.localhost. [127.0.0.1], dsn=2.0.0, stat=Sent
>(h08Hwg32011930 Message accepted for delivery)
>
>2.) binary sent with .exe  extension and SPAM subject line
>Jan  8 13:01:18 tonka MailScanner[11756]: New Batch: Forwarding 1 unscanned
>messages, 28488 bytes
>Jan  8 13:01:18 tonka MailScanner[11756]: Spam Checks: Starting
>Jan  8 13:01:58 tonka MailScanner[11756]: Message h08I1F32012337 from
>127.0.0.1 (tonka.aberfoyle.com) is spam, SpamAssassin (score=5.6, required
>5, BALANCE_FOR_LONG_20K, FREE_MONEY, NO_MX_FOR_FROM, SPAM_PHRASE_00_01,
>SUBJ_ALL_CAPS, SUBJ_FREE_CAP, SUB_FREE_OFFER, SUPERLONG_LINE,
>UPPERCASE_25_50)
>Jan  8 13:01:58 tonka MailScanner[11756]: Spam Checks: Found 1 spam
>messages
>Jan  8 13:01:58 tonka MailScanner[11756]: Spam Actions: message
>h08I1F32012337 actions are deliver
>Jan  8 13:01:58 tonka MailScanner[11756]: Unscanned: Delivered 1 messages
>Jan  8 13:01:59 tonka MailScanner[11756]: Virus and Content Scanning:
>Starting
>Jan  8 13:02:00 tonka sendmail[12502]: h08I1F32012337: to
>=<mhewryk at tonka.aberfoyle.com>, ctladdr=<root at tonka.aberfoyle.com> (0/0),
>delay=00:00:44, xdelay=00:00:00, mailer=local, pri=120367, dsn=2.0.0,
>stat=Sent
>
>
>Thanks,
>
>Magda Hewryk
>--------------------------------
>Mid-Range Systems
>RSP:   905-273-1637
>CELL:   416-948-4427

--
Julian Field
www.MailScanner.info
MailScanner thanks transtec Computers for their support



More information about the MailScanner mailing list