Block ZIP file when I configure not blocking.

Peter Bonivart peter at UCGBOOK.COM
Sun Sep 5 17:26:44 IST 2004


<x-flowed>
Idan Plotnik wrote:
> Hi All,
>
> In the file filename.rules.conf I configure "allow   \.zip$
> -       -"
> And still in some cases the MailScanner block ZIP file and in some not.
> I am using mailscanner-4.32.5-1.
> Someone familier with this problem ?
>
> BTW I don't check file size.
>
>
> This is a message from the MailScanner E-Mail Virus Protection Service
> ----------------------------------------------------------------------
> The original e-mail attachment "Data.zip"
> is on the list of unacceptable attachments for this site and has been
> replaced by this warning message.
>
> If you wish to receive a copy of the original attachment, please
> e-mail helpdesk and include the whole of this message
> in your request. Alternatively, you can call them, with
> the contents of this message to hand when you call.
>
> At Sun Sep  5 17:49:33 2004 the virus scanner said:
>    MailScanner: Eudora *.lnk security hole attack (SpmProCfg.lnk)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

>
> Note to Help Desk: Look on the yoursite MailScanner in
> /var/spool/MailScanner/quarantine/20040905 (message i85EkRuG015097).

Look at the message you included yourself. The answer is there. It's not
blocked because it's a zip file but because it's a lnk-file. Grep for
lnk in filename.rules and you will find it set to deny.

--
/Peter Bonivart

--Unix lovers do it in the Sun

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
</x-flowed>



More information about the MailScanner mailing list