New user trying to understand mailscanner capab ilities to des ign solution

[Peter Bonivart]

Shoval Tomer wrote:
> Almost all of Virustest.org tests were passed just fine.
> The one single flop was test #25 which tests CLSID as extension.
>
> The message, as received, is attached.

The filename in the message seems to be
clsidfile.txt.{00020C01-0000-0000-C000-000000000046} and this rule in
filename.rules.conf should catch it:

# Deny filenames ending with CLSID's
deny    \{[a-hA-H0-9-]{25,}\}   Filename trying to hide its real type
                 Files containing  CLSID's are trying to hide their real
type

Does yours look like that or is it commented out or anything?

--
/Peter Bonivart

--Unix lovers do it in the Sun

Sun Fire V210, Solaris 9, Sendmail 8.12.10, MailScanner 4.31.6,
SpamAssassin 2.63 + DCC 1.2.50, ClamAV 0.73 + GMP 4.1.2, Vispan 1.4

-------------------------- MailScanner list ----------------------
To leave, send    leave mailscanner    to jiscmail at jiscmail.ac.uk
Before posting, please see the Most Asked Questions at
http://www.mailscanner.biz/maq/     and the archives at
http://www.jiscmail.ac.uk/lists/mailscanner.html