Error in line 3 in filename.rules.conf

Julian Field mailscanner at ecs.soton.ac.uk
Tue Feb 3 20:06:44 GMT 2004


At 19:46 03/02/2004, you wrote:
>Thank you for your answers!!!!
>I have not changed this file, and line 3 looks to be ok.

You must have done, this file is correct as shipped, as far as I am aware
(and over 2000 people have downloaded and run the latest version). I
suggest you have had 1 line either broken into 2 or else the fields are not
separated by tabs alone.


>In the log I get this error:
>Feb  3 14:39:43 MailScanner MailScanner[5743]: Possible syntax error on
>line 3 o
>f /etc/MailScanner/filename.rules.conf
>Feb  3 14:39:43 MailScanner MailScanner[5743]: Remember to separate
>fields with
>tab characters!
>
># See http://office.microsoft.com/2000/articles/Out2ksecFAQ.htm for more
>info.
>deny    \.cnf$          Possible SpeedDial attack
>                         SpeedDials are very dangerous in email
>deny    \.hta$          Possible Microsoft HTML archive attack
>                         HTML archives are very dangerous in email
>deny    \.ins$          Possible Microsoft Internet Comm. Settings
>attack
>                         Windows Internet Settings are dangerous in email
>deny    \.jse?$         Possible Microsoft JScript attack
>                         JScript Scripts are dangerous in email
>deny    \.lnk$          Possible Eudora *.lnk security hole attack
>                         Eudora *.lnk security hole attack
>deny    \.ma[dfgmqrstvw]$       Possible Microsoft Access Shortcut
>attack
>                         Microsoft Access Shortcuts are dangerous in
>email
>deny    \.pif$          Possible MS-Dos program shortcut attack
>                         Shortcuts to MS-Dos programs are very dangerous
>in email
>deny    \.scf$          Possible Windows Explorer Command attack
>                         Windows Explorer Commands are dangerous in email
>deny    \.sct$          Possible Microsoft Windows Script Component
>attack
>                         Windows Script Components are dangerous in email
>deny    \.shb$          Possible document shortcut attack
>                         Shortcuts Into Documents are very dangerous in
>email
>deny    \.shs$          Possible Shell Scrap Object attack
>                         Shell Scrap Objects are very dangerous in email
>deny    \.vb[es]$       Possible Microsoft Visual Basic script attack
>                         Visual Basic Scripts are dangerous in email
>deny    \.ws[cfh]$      Possible Microsoft Windows Script Host attack
>                         Windows Script Host files are dangerous in email
>deny    \.xnk$          Possible Microsoft Exchange Shortcut attack
>                         Microsoft Exchange Shortcuts are dangerous in
>email

--
Julian Field
www.MailScanner.info
Professional Support Services at www.MailScanner.biz
MailScanner thanks transtec Computers for their support
PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654



More information about the MailScanner mailing list