Filename Subject Text vs. Content Subject Text
Mariano Absatz
mailscanner at LISTS.COM.AR
Tue Sep 9 22:35:15 IST 2003
Hi,
I'm using MS 4.23-11 with SA 2.55.
It seems MS is somehow confusing "Filename Subject Text" "Content Subject
Text".
I have the following settings:
Allow IFrame Tags = no
Log IFrame Tags = yes
Allow Form Tags = no
Allow Object Codebase Tags = no
Filename Modify Subject = no
Filename Subject Text = {Nombre de archivo anexo prohibido}
Content Modify Subject = yes
Content Subject Text = {Contenido potencialmente peligroso}
And, when getting a message with IFrame, it added the "Filename Subject
Text" instead of the "Content Subject Text" I expected.
Here's the log:
Sep 5 14:43:51 or MX[4995]: New Batch: Scanning 1 messages, 43452 bytes
Sep 5 14:43:51 or MX[4995]: Spam Checks: Starting
Sep 5 14:43:54 or MX[4995]: Virus and Content Scanning: Starting
Sep 5 14:43:54 or MX[4995]: Filename Checks: Allowing msg-4995-156.html
(no rule matched)
Sep 5 14:43:54 or MX[4995]: Filename Checks: Allowing msg-4995-155.txt
Sep 5 14:43:54 or MX[4995]: Filetype Checks: Allowing msg-4995-155.txt
Sep 5 14:43:54 or MX[4995]: Filetype Checks: Allowing msg-4995-156.html
Sep 5 14:43:54 or MX[4995]: HTML IFrame tag found in message 1221617 from
boletininformar at redinformar.com.ar
Sep 5 14:43:54 or MX[4995]: Content Checks: Detected HTML-specific
exploits in 1221617
Sep 5 14:43:54 or MX[4995]: Content Checks: Found 1 problems
Sep 5 14:43:54 or MX[4995]: ZM: message 1221617 renamed into 1156463
Sep 5 14:43:54 or MX[4995]: Silent: Delivered 1 messages containing silent
viruses
And the modified was:
{Nombre de archivo anexo prohibido} RI-Boletín Informar Computación: Año 1 -
Número 51 - SEPTIEMBRE 5, 2003
Are these entries mixed up?
--
Mariano Absatz
El Baby
----------------------------------------------------------
Don't worry about the world coming to an end today.It's already tomorrow in Australia. -- Charles Schulz
More information about the MailScanner
mailing list