Problem with MS blocking legit attachments

Brendan Chard chardlist at CHARD.NET
Thu May 20 20:59:44 IST 2004


Possibly in the filename.rules.conf file.  The last 2 lines:

# Deny all other double file extensions. This catches any hidden filenames.

deny    \.[a-z][a-z0-9]{2,3}\s*\.[a-z0-9]{3}$   Found possible filename
hiding Attempt to hide real filename extension


-Brendan

-----Original Message-----
From: MailScanner mailing list [mailto:MAILSCANNER at JISCMAIL.AC.UK] On Behalf
Of Jason Williams
Sent: Thursday, May 20, 2004 3:57 PM
To: MAILSCANNER at JISCMAIL.AC.UK
Subject: Problem with MS blocking legit attachments

Hello everyone.

This morning, MS started to block legitimate emails attached with .doc
files. So far, I have had 3 blocked today.
They are all .doc files (all resumes actually) and im trying to figure out
why they are being blocked.

Looking through the logs as well as MailWatch, I see this in the headers
field:


MailScanner: Attempt to hide real filename extension (Resume.kari.doc)


I can't release it from quarantine, as it gets put right back into the
quarantine directory.

I've looked through my .conf file, but haven't been able to figure out what
this is happening.

Anyone have any ideas?

System:

FreeBSD 4.9
MS 4.29.7
Sendmail 8.12.11

I appreciate it

Jason

-------------------------- MailScanner list ----------------------
To leave, send    leave mailscanner    to jiscmail at jiscmail.ac.uk
Before posting, please see the Most Asked Questions at
http://www.mailscanner.biz/maq/     and the archives at
http://www.jiscmail.ac.uk/lists/mailscanner.html

-------------------------- MailScanner list ----------------------
To leave, send    leave mailscanner    to jiscmail at jiscmail.ac.uk
Before posting, please see the Most Asked Questions at
http://www.mailscanner.biz/maq/     and the archives at
http://www.jiscmail.ac.uk/lists/mailscanner.html



More information about the MailScanner mailing list