Block ZIP file when I configure not blocking.

Idan Plotnik idan at SECURENET.CO.IL
Sun Sep 5 18:29:03 IST 2004


How do I disable these messages to the recipient ? And transfer them to
a specific mailbox ?

-----Original Message-----
From: Peter Bonivart [mailto:peter at UCGBOOK.COM] 
Sent: Sunday, September 05, 2004 6:27 PM
To: MAILSCANNER at JISCMAIL.AC.UK
Subject: Re: Block ZIP file when I configure not blocking.

Idan Plotnik wrote:
> Hi All,
>
> In the file filename.rules.conf I configure "allow   \.zip$
> -       -"
> And still in some cases the MailScanner block ZIP file and in some
not.
> I am using mailscanner-4.32.5-1.
> Someone familier with this problem ?
>
> BTW I don't check file size.
>
>
> This is a message from the MailScanner E-Mail Virus Protection Service
> ----------------------------------------------------------------------
> The original e-mail attachment "Data.zip"
> is on the list of unacceptable attachments for this site and has been 
> replaced by this warning message.
>
> If you wish to receive a copy of the original attachment, please 
> e-mail helpdesk and include the whole of this message in your request.

> Alternatively, you can call them, with the contents of this message to

> hand when you call.
>
> At Sun Sep  5 17:49:33 2004 the virus scanner said:
>    MailScanner: Eudora *.lnk security hole attack (SpmProCfg.lnk)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

>
> Note to Help Desk: Look on the yoursite MailScanner in
> /var/spool/MailScanner/quarantine/20040905 (message i85EkRuG015097).

Look at the message you included yourself. The answer is there. It's not
blocked because it's a zip file but because it's a lnk-file. Grep for
lnk in filename.rules and you will find it set to deny.

--
/Peter Bonivart

--Unix lovers do it in the Sun

------------------------ MailScanner list ------------------------ To
unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the
archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).



More information about the MailScanner mailing list