Block ZIP file when I configure not blocking.
Idan Plotnik
idan at SECURENET.CO.IL
Sun Sep 5 18:29:03 IST 2004
How do I disable these messages to the recipient ? And transfer them to
a specific mailbox ?
-----Original Message-----
From: Peter Bonivart [mailto:peter at UCGBOOK.COM]
Sent: Sunday, September 05, 2004 6:27 PM
To: MAILSCANNER at JISCMAIL.AC.UK
Subject: Re: Block ZIP file when I configure not blocking.
Idan Plotnik wrote:
> Hi All,
>
> In the file filename.rules.conf I configure "allow \.zip$
> - -"
> And still in some cases the MailScanner block ZIP file and in some
not.
> I am using mailscanner-4.32.5-1.
> Someone familier with this problem ?
>
> BTW I don't check file size.
>
>
> This is a message from the MailScanner E-Mail Virus Protection Service
> ----------------------------------------------------------------------
> The original e-mail attachment "Data.zip"
> is on the list of unacceptable attachments for this site and has been
> replaced by this warning message.
>
> If you wish to receive a copy of the original attachment, please
> e-mail helpdesk and include the whole of this message in your request.
> Alternatively, you can call them, with the contents of this message to
> hand when you call.
>
> At Sun Sep 5 17:49:33 2004 the virus scanner said:
> MailScanner: Eudora *.lnk security hole attack (SpmProCfg.lnk)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
>
> Note to Help Desk: Look on the yoursite MailScanner in
> /var/spool/MailScanner/quarantine/20040905 (message i85EkRuG015097).
Look at the message you included yourself. The answer is there. It's not
blocked because it's a zip file but because it's a lnk-file. Grep for
lnk in filename.rules and you will find it set to deny.
--
/Peter Bonivart
--Unix lovers do it in the Sun
------------------------ MailScanner list ------------------------ To
unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the
archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
More information about the MailScanner
mailing list