MS 4.35.11 - need a help with Deliver Cleaned Messages after
MS upgrade
Magda Hewryk
MHewryk at SYMCOR.COM
Mon Nov 29 10:46:25 GMT 2004
Martin,
Is it save to remove rpm -e mailscanner-4.35.11-1; and install back my
old version using install.sh script?
Can I manually remove current rpm and proceed with the lower version
install?
Thanks,
Magda Hewryk
--------------------------------
Mid-Range Systems
905-273-1637 (Office)
416-554-0743 (Cell)
Martin Hepworth
<martinh at SOLID-ST
ATE-LOGIC.COM> To
Sent by: MAILSCANNER at JISCMAIL.AC.UK
MailScanner cc
mailing list
<MAILSCANNER at JISC Subject
MAIL.AC.UK> Re: MS 4.35.11 - need a help with
Deliver Cleaned Messages after MS
upgrade
11/29/2004 05:36
AM
Please respond to
MailScanner
mailing list
<MAILSCANNER at JISC
MAIL.AC.UK>
Magda
what about the 'old' entries in the MailScanner.conf that do all the
message notication and any rules they call??
--
Martin Hepworth
Snr Systems Administrator
Solid State Logic
Tel: +44 (0)1865 842300
Magda Hewryk wrote:
> Martin,
>
> Here are some relevant or new entries in my MailScanner.conf file:
>
> Deliver Cleaned Messages = yes
> Max Normal Queue Size = 1000
> Maximum Attachments Per Message = 200
> Expand TNEF = yes
> Deliver Unparsable TNEF = no
> TNEF Expander = /usr/bin/tnef --maxsize=100000000
> TNEF Timeout = 120
> File Command = #/usr/bin/file
> File Timeout = 20
> Maximum Message Size = 0
> Maximum Attachment Size = -1
> Minimum Attachment Size = -1
> Maximum Archive Depth = 2
> Find Archives By Content = yes
>
>
> Stored Bad Content Message Report =
%report-dir%/stored.content.message.txt
> Stored Bad Filename Message Report =
> %report-dir%/stored.filename.message.txt #mnh T122
> Stored Virus Message Report = %report-dir%/stored.virus.message.txt
> #mnh T122-mcafee
>
> Inline HTML Warning = %report-dir%/inline.warning.html
> #mnh T122
> Inline Text Warning = %report-dir%/inline.warning.txt
>
>
>
>
> Magda Hewryk
> <MHewryk at SYMCOR.C
> OM>
To
> Sent by: MAILSCANNER at JISCMAIL.AC.UK
> MailScanner
cc
> mailing list
> <MAILSCANNER at JISC
Subject
> MAIL.AC.UK> Re: MS 4.35.11 - need a help with
> Deliver Cleaned Messages after MS
> upgrade
> 11/29/2004 05:19
> AM
>
>
> Please respond to
> MailScanner
> mailing list
> <MAILSCANNER at JISC
> MAIL.AC.UK>
>
>
>
>
>
>
> Hi Martin,
>
> I have not changed any rules and the config file is almost the same.
After
> upgrade I've run upgrade_MailScanner_conf command and then I differed
the
> new file with the existing .config. Nothing is really changed except MCP
&
> Advanced setting which is new for 4.35.11.
>
> Rules are the same:
> to deny zip/gifs/jpegs and other attachments.
>
> I'm testing any attachments, and all attachments are quarantined
correctly,
> notification is sent to Postmaster correctly but the recipient gets
> nothing. Either notification nor original message with the stripped
> attachments is passed to recipient.
>
> Any thoughts?
>
> Magda
>
>
>
>
>
>
>
> Martin Hepworth
> <martinh at SOLID-ST
> ATE-LOGIC.COM>
To
> Sent by: MAILSCANNER at JISCMAIL.AC.UK
> MailScanner
cc
> mailing list
> <MAILSCANNER at JISC
Subject
> MAIL.AC.UK> Re: MS 4.35.11 - need a help with
> Deliver Cleaned Messages after MS
> upgrade
> 11/29/2004 05:09
> AM
>
>
> Please respond to
> MailScanner
> mailing list
> <MAILSCANNER at JISC
> MAIL.AC.UK>
>
>
>
>
>
>
> Magda
>
> Ok, what are the relevent bits of the MailScanner.conf and any rules..
>
>
> --
> Martin Hepworth
> Snr Systems Administrator
> Solid State Logic
> Tel: +44 (0)1865 842300
>
>
> Magda Hewryk wrote:
>
>>Hi Martin,
>>Thanks for getting back to me!
>>
>>I've upgraded MS: version 4.31.6 to 4.35.11
>>OS: Fedora 1
>>Download file: MailScanner-4.35.11-1.rpm.tar.gzip
>>
>>I can't get the Notification to be sent to the user about the attachment
>>being stripped.
>>I've got the zip attachment in the quarantine directory but the message
>
> is
>
>>not forward to the user. It is treated like a virus (Still Deliver
>
> Silent
>
>>Viruses = no ).
>>I don't know why? The postmaster however gets the message "Bad Filename
>>Detected".
>>
>>What is wrong that MS can't send the notification about the attachment
>>stripped to the user?
>>All work before the upgrade (last night).
>>
>>Nov 29 04:47:29 xxxxx MailScanner[24695]: Filename Checks: Possible
>>Microsoft Exchange Shortcut attack (iAT9lAUC026333 Copyofbb-lnxraid.zip)
>>Nov 29 04:47:29 xxxxx MailScanner[24695]: Saved infected
>>"Copyofbb-lnxraid.zip" to
>>/var/spool/MailScanner/quarantine/20041129/iAT9lAUC026333
>>
>>Thanks,
>>
>>Magda Hewryk
>>--------------------------------
>>Mid-Range Systems
>>905-273-1637 (Office)
>>416-554-0743 (Cell)
>>
>>MailScanner mailing list <MAILSCANNER at JISCMAIL.AC.UK> wrote on 11/29/2004
>>04:52:13 AM:
>>
>>
>>
>>>Magda
>>>
>>>where about's are you stuck. What have you tried and what's not
>>>happening. Also remind of the O/S and how you've installed MS - RPM or
>>>tar,gz version..
>>>
>>>
>>>--
>>>Martin Hepworth
>>>Snr Systems Administrator
>>>Solid State Logic
>>>Tel: +44 (0)1865 842300
>>>
>>>
>>>Magda Hewryk wrote:
>>>
>>>
>>>>Hi,
>>>>
>>>>I couldn't uninstall MS 4.35.11 and go back to my previous version
>>
>>4.31.6.
>>
>>
>>>>I'm stack here trying to get the report about the Bad File Name
>>
>>working.
>>
>>
>>>>For some reason it stopped working after the MS upgrade.
>>>>
>>>>The notification to the Postmaster work OK though.
>>>>
>>>>Any help,
>>>>Magda
>>>>
>>>>------------------------ MailScanner list ------------------------
>>>>To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
>>>>'leave mailscanner' in the body of the email.
>>>>Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
>>>>the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>>>>
>>>>Support MailScanner development - buy the book off the website!
>>>
>>>**********************************************************************
>>>
>>>This email and any files transmitted with it are confidential and
>>>intended solely for the use of the individual or entity to whom they
>>>are addressed. If you have received this email in error please notify
>>>the system manager.
>>>
>>>This footnote confirms that this email message has been swept
>>>for the presence of computer viruses and is believed to be clean.
>>>
>>>**********************************************************************
>>>
>>>------------------------ MailScanner list ------------------------
>>>To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
>>>'leave mailscanner' in the body of the email.
>>>Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
>>>the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>>>
>>>Support MailScanner development - buy the book off the website!
>>
>>
>>------------------------ MailScanner list ------------------------
>>To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
>>'leave mailscanner' in the body of the email.
>>Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
>>the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>>
>>Support MailScanner development - buy the book off the website!
>
>
> **********************************************************************
>
> This email and any files transmitted with it are confidential and
> intended solely for the use of the individual or entity to whom they
> are addressed. If you have received this email in error please notify
> the system manager.
>
> This footnote confirms that this email message has been swept
> for the presence of computer viruses and is believed to be clean.
>
> **********************************************************************
>
> ------------------------ MailScanner list ------------------------
> To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
> 'leave mailscanner' in the body of the email.
> Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>
> Support MailScanner development - buy the book off the website!
>
> ------------------------ MailScanner list ------------------------
> To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
> 'leave mailscanner' in the body of the email.
> Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>
> Support MailScanner development - buy the book off the website!
>
> ------------------------ MailScanner list ------------------------
> To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
> 'leave mailscanner' in the body of the email.
> Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>
> Support MailScanner development - buy the book off the website!
**********************************************************************
This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom they
are addressed. If you have received this email in error please notify
the system manager.
This footnote confirms that this email message has been swept
for the presence of computer viruses and is believed to be clean.
**********************************************************************
------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
Support MailScanner development - buy the book off the website!
------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
Support MailScanner development - buy the book off the website!
More information about the MailScanner
mailing list