Russian text causing strangeness

[Dustin Baer]

What I have done is written a "From: and To:" rule in
filetype.rules.conf (filetype.rules.russian.conf) to allow executables.
If anyone has a better suggestion, please let me know.

Thanks,

Dustin

Dustin Baer wrote:

> Hi All,
>
> MailScanner 4.27.7  (Also happens with 4.31.6)
> Sendmail 8.12.10
> Solaris 9
>
> I wrote to the list a few weeks ago about this issue, but haven't had a
> response.
>
> Sometimes when Russian text is included in an email, some strange
> Filetype checking quarantine behavior occurs in MailScanner.  Today, the
> stored.filename.message.txt was quarantined as msg-6667-86.txt.  There
> were no attachments with this email.
>
> The MailScanner logs are:
>
> Jul  7 03:24:03 mail1.ihs.com MailScanner[6667]: Filetype Checks: No
> executables (i679NmWL010198 msg-6667-86.txt)
> Jul  7 03:24:03 mail1.ihs.com MailScanner[6667]: Saved entire message to
> /var/spool/MailScanner/quarantine/20040707/i679NmWL010198
> Jul  7 03:24:04 mail1.ihs.com MailScanner[6667]: Saved infected
> "msg-6667-86.txt" to
> /var/spool/MailScanner/quarantine/20040707/i679NmWL010198
>
> In testing, I have noticed that with 4.27.7, the
> stored.filename.message.txt is quarantined as msg...txt.  With 4.31.6,
> the actual email (df) is quarantined.
>
> Any ideas?
>
> The qf/df and msg-6667-86.txt are available in a zip file (2326 bytes)
> at http://www.pcisys.net/~baer/MailScanner/i679NmWL010198.zip, if anyone
> would like to take a look.
>
> Thanks,
>
> Dustin

-------------------------- MailScanner list ----------------------
To leave, send    leave mailscanner    to jiscmail at jiscmail.ac.uk
Before posting, please see the Most Asked Questions at
http://www.mailscanner.biz/maq/     and the archives at
http://www.jiscmail.ac.uk/lists/mailscanner.html