Allow password protected archives.

[Martin Hepworth]

Douglas Willis wrote:
> Julian Field wrote:
>
>> At 15:29 25/05/2004, you wrote:
>>
>>> Hi,
>>>
>>> I'm attempting to allow password protected archive files to be sent from
>>>   our domain but the rules don't seem to be working as I've got them
>>> set-up.  I've tried using *@bas.ac.uk as well as bas.ac.uk in the From:
>>> line of the rules file.
>>>
>>> The emails get put in quarantine with the MailScanner report of:-
>>> MailScanner: Message contained password-protected archive
>>>
>>> MailScanner.conf has the following in it.
>>>
>>> Allow Password-Protected Archives = /etc/MailScanner/rules/archive.rules
>>>
>>> the archive.rules file consists of :-
>>>
>>> #Allow mail from BAS with password protected archives.
>>> From:   bas.ac.uk       yes
>>> # By default don't allow password protected archives.
>>> From:   default no
>>>
>>> Any help would be appreciated.
>>
>>
>>
>> Change the "default" line to be
>> FromOrTo: default no
>> Not sure that will fix it (can't remember the "default default" at the
>> moment) but it's definitely worth a try.
>> Also check the envelope sender (X-MailScanner-Envelope-From:) address is
>> really bas.ac.uk and not somehost.bas.ac.uk.
>>
>
> Tried changing the default line to FromOrTo: but with no success.  Ive
> also noticed that my rules file for HTML Forms is not being run
> correctly now as well.
>
> Is there a debug option I can turn on to see if the rule file is being
> used correctly.
>
> Versions of software:-
>
> MailScanner 4.30.3-2
>  - ( Just upgraded on Monday using the rpm install tar ball )
> spamassassin 2.63-1
> RedHat 9
> mailwatch 0.4
>
>
>
>
> --
> Douglas Willis (ddw at nerc-bas.ac.uk)
> British Antarctic Survey
> High Cross, Madingley Road
> Cambridge, CB3 0ET, United Kingdom
> tel: +44 1223 221400, fax: +44 1223 362616

Douglas

might want to change the rule to be based on ip-addresses as many
malware 'solutions' fake the from address and this could lead to the
rule letting nasties through..

In any case the rule should be

From:   /[\@\-]bas\.ac.uk$/  yes
From:   default no


see the EXAMPLES file in the rules directory.

--
Martin Hepworth
Snr Systems Administrator
Solid State Logic
Tel: +44 (0)1865 842300

**********************************************************************

This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom they
are addressed. If you have received this email in error please notify
the system manager.

This footnote confirms that this email message has been swept
for the presence of computer viruses and is believed to be clean.

**********************************************************************

-------------------------- MailScanner list ----------------------
To leave, send    leave mailscanner    to jiscmail at jiscmail.ac.uk
Before posting, please see the Most Asked Questions at
http://www.mailscanner.biz/maq/     and the archives at
http://www.jiscmail.ac.uk/lists/mailscanner.html