MailScanner 4.28-5 and zip files - an oddity
Julian Field
mailscanner at ecs.soton.ac.uk
Tue Mar 9 10:17:37 GMT 2004
By default no warnings are sent. You need to add
Non-Forging Viruses = Zip-Password
to your MailScanner.conf.
At 00:54 09/03/2004, you wrote:
>I've just updated to 4.28-5 on FreeBSD and I've been testing the
>encrypted zip file protection. I've not got anything fancy in my config,
>I went with the default of just not allowing them.
>
>Here's the oddity...
>
>I send a test message in (from my exim logs):
>
>2004-03-09 00:42:21 1B0VK9-00098K-Nw <= t.d.bishop at mydomain.com
>H=mx5.mydomain.com (mx5.mydomain.com) [1.2.3.4] P=esmtp S=12101
>id=20040309004148.GC24156 at mydomain.com
>
>MailScanner picks it up:
>
>Mar 9 00:42:23 server MailScanner[34903]: New Batch: Scanning 1 messages,
>12470 bytes
>Mar 9 00:42:24 server MailScanner[34903]: Password-protected archive
>(test.zip) in 1B0VK9-00098K-Nw
>Mar 9 00:42:24 server MailScanner[34903]: Virus and Content Scanning:
>Starting
>Mar 9 00:42:25 server MailScanner[34903]:
>/var/spool/MailScanner/incoming/34903/1B0VK9-00098K-Nw/test.zip->graph1.xls
> Not scanned (encrypted)
>Mar 9 00:42:25 server MailScanner[34903]:
>/var/spool/MailScanner/incoming/34903/1B0VK9-00098K-Nw/test.zip->graph2.xls
> Not scanned (encrypted)
>Mar 9 00:42:25 server MailScanner[34903]: Notices: Warned about 1 messages
>Mar 9 00:42:25 server MailScanner[34903]: New Batch: Scanning 1 messages,
>1960 bytes
>
>MailScanner generates a normal warning to postmaster:
>
>2004-03-09 00:42:25 1B0VKD-00098e-8B <= postmaster at otherdomain.com
>U=mailnull P=local S=1733
>2004-03-09 00:42:27 1B0VKD-00098e-8B => /home/tdb/Maildir/.postmaster/
>(tdb at server.otherdomain.com) <postmaster at otherdomain.com> R=userforward
>T=address_directory
>2004-03-09 00:42:27 1B0VKD-00098e-8B Completed
>
>And that's it... I was expecting something to either be sent to the
>sender or the recipient. Not complete silence.
>
>I'm presuming I've just overlooked something which is intended
>behaviour. Any advice welcomed.
>
>Cheers,
>Tim.
>
>--
>Tim Bishop
>http://www.bishnet.net/tim
>PGP Key: 0x5AE7D984
--
Julian Field
www.MailScanner.info
MailScanner thanks transtec Computers for their support
PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
More information about the MailScanner
mailing list