MS 4.35.11 - need a help with Deliver Cleaned Messages after
MS upgrade
Magda Hewryk
MHewryk at SYMCOR.COM
Mon Nov 29 10:26:47 GMT 2004
Martin,
Here are some relevant or new entries in my MailScanner.conf file:
Deliver Cleaned Messages = yes
Max Normal Queue Size = 1000
Maximum Attachments Per Message = 200
Expand TNEF = yes
Deliver Unparsable TNEF = no
TNEF Expander = /usr/bin/tnef --maxsize=100000000
TNEF Timeout = 120
File Command = #/usr/bin/file
File Timeout = 20
Maximum Message Size = 0
Maximum Attachment Size = -1
Minimum Attachment Size = -1
Maximum Archive Depth = 2
Find Archives By Content = yes
Stored Bad Content Message Report = %report-dir%/stored.content.message.txt
Stored Bad Filename Message Report =
%report-dir%/stored.filename.message.txt #mnh T122
Stored Virus Message Report = %report-dir%/stored.virus.message.txt
#mnh T122-mcafee
Inline HTML Warning = %report-dir%/inline.warning.html
#mnh T122
Inline Text Warning = %report-dir%/inline.warning.txt
Magda Hewryk
<MHewryk at SYMCOR.C
OM> To
Sent by: MAILSCANNER at JISCMAIL.AC.UK
MailScanner cc
mailing list
<MAILSCANNER at JISC Subject
MAIL.AC.UK> Re: MS 4.35.11 - need a help with
Deliver Cleaned Messages after MS
upgrade
11/29/2004 05:19
AM
Please respond to
MailScanner
mailing list
<MAILSCANNER at JISC
MAIL.AC.UK>
Hi Martin,
I have not changed any rules and the config file is almost the same. After
upgrade I've run upgrade_MailScanner_conf command and then I differed the
new file with the existing .config. Nothing is really changed except MCP &
Advanced setting which is new for 4.35.11.
Rules are the same:
to deny zip/gifs/jpegs and other attachments.
I'm testing any attachments, and all attachments are quarantined correctly,
notification is sent to Postmaster correctly but the recipient gets
nothing. Either notification nor original message with the stripped
attachments is passed to recipient.
Any thoughts?
Magda
Martin Hepworth
<martinh at SOLID-ST
ATE-LOGIC.COM> To
Sent by: MAILSCANNER at JISCMAIL.AC.UK
MailScanner cc
mailing list
<MAILSCANNER at JISC Subject
MAIL.AC.UK> Re: MS 4.35.11 - need a help with
Deliver Cleaned Messages after MS
upgrade
11/29/2004 05:09
AM
Please respond to
MailScanner
mailing list
<MAILSCANNER at JISC
MAIL.AC.UK>
Magda
Ok, what are the relevent bits of the MailScanner.conf and any rules..
--
Martin Hepworth
Snr Systems Administrator
Solid State Logic
Tel: +44 (0)1865 842300
Magda Hewryk wrote:
> Hi Martin,
> Thanks for getting back to me!
>
> I've upgraded MS: version 4.31.6 to 4.35.11
> OS: Fedora 1
> Download file: MailScanner-4.35.11-1.rpm.tar.gzip
>
> I can't get the Notification to be sent to the user about the attachment
> being stripped.
> I've got the zip attachment in the quarantine directory but the message
is
> not forward to the user. It is treated like a virus (Still Deliver
Silent
> Viruses = no ).
> I don't know why? The postmaster however gets the message "Bad Filename
> Detected".
>
> What is wrong that MS can't send the notification about the attachment
> stripped to the user?
> All work before the upgrade (last night).
>
> Nov 29 04:47:29 xxxxx MailScanner[24695]: Filename Checks: Possible
> Microsoft Exchange Shortcut attack (iAT9lAUC026333 Copyofbb-lnxraid.zip)
> Nov 29 04:47:29 xxxxx MailScanner[24695]: Saved infected
> "Copyofbb-lnxraid.zip" to
> /var/spool/MailScanner/quarantine/20041129/iAT9lAUC026333
>
> Thanks,
>
> Magda Hewryk
> --------------------------------
> Mid-Range Systems
> 905-273-1637 (Office)
> 416-554-0743 (Cell)
>
> MailScanner mailing list <MAILSCANNER at JISCMAIL.AC.UK> wrote on 11/29/2004
> 04:52:13 AM:
>
>
>>Magda
>>
>>where about's are you stuck. What have you tried and what's not
>>happening. Also remind of the O/S and how you've installed MS - RPM or
>>tar,gz version..
>>
>>
>>--
>>Martin Hepworth
>>Snr Systems Administrator
>>Solid State Logic
>>Tel: +44 (0)1865 842300
>>
>>
>>Magda Hewryk wrote:
>>
>>> Hi,
>>>
>>>I couldn't uninstall MS 4.35.11 and go back to my previous version
>
> 4.31.6.
>
>>>I'm stack here trying to get the report about the Bad File Name
>
> working.
>
>>>For some reason it stopped working after the MS upgrade.
>>>
>>>The notification to the Postmaster work OK though.
>>>
>>>Any help,
>>>Magda
>>>
>>>------------------------ MailScanner list ------------------------
>>>To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
>>>'leave mailscanner' in the body of the email.
>>>Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
>>>the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>>>
>>>Support MailScanner development - buy the book off the website!
>>
>>**********************************************************************
>>
>>This email and any files transmitted with it are confidential and
>>intended solely for the use of the individual or entity to whom they
>>are addressed. If you have received this email in error please notify
>>the system manager.
>>
>>This footnote confirms that this email message has been swept
>>for the presence of computer viruses and is believed to be clean.
>>
>>**********************************************************************
>>
>>------------------------ MailScanner list ------------------------
>>To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
>>'leave mailscanner' in the body of the email.
>>Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
>>the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>>
>>Support MailScanner development - buy the book off the website!
>
>
> ------------------------ MailScanner list ------------------------
> To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
> 'leave mailscanner' in the body of the email.
> Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>
> Support MailScanner development - buy the book off the website!
**********************************************************************
This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom they
are addressed. If you have received this email in error please notify
the system manager.
This footnote confirms that this email message has been swept
for the presence of computer viruses and is believed to be clean.
**********************************************************************
------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
Support MailScanner development - buy the book off the website!
------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
Support MailScanner development - buy the book off the website!
------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
Support MailScanner development - buy the book off the website!
More information about the MailScanner
mailing list