RES: Allowing specific executable files

Renata D. Vieira rdvieira at IMPACTOOLS.COM
Tue Sep 28 15:22:21 IST 2004


This is exactly what I need, but it didn't work. In /var/log/maillog, I get
the following error:

Sep 28 11:19:28 mail MailScanner[3212]: Possible syntax error on line 63 of
/usr/local/etc/MailScanner/filename.rules.conf
Sep 28 11:19:28 mail MailScanner[3212]: Remember to separate fields with tab
characters!
Sep 28 11:19:28 mail MailScanner[3212]: Possible syntax error on line 64 of
/usr/local/etc/MailScanner/filename.rules.conf
Sep 28 11:19:28 mail MailScanner[3212]: Remember to separate fields with tab
characters!

In the filename.conf.rules, the allow rule is:

allow   ImportWizard\.exe$      -       -
allow   ComsipUpload\.exe$      -       -

It's before the 'deny   \.exe$' rule and I'm using tabs between fields.

Could someone help me, please?

Thanks a lot.

Renata.




-----Mensagem original-----
De: MailScanner mailing list [mailto:MAILSCANNER at JISCMAIL.AC.UK] Em nome de
Matt Kettler
Enviada em: segunda-feira, 27 de setembro de 2004 17:13
Para: MAILSCANNER at JISCMAIL.AC.UK
Assunto: Re: Allowing specific executable files

At 03:40 PM 9/27/2004, Renata D. Vieira wrote:
>I configured MailScanner in my server to deny all the executable files.
>However, there are 2 specific executable files those are send and
>received between our client and us.
>My question is: Is it possible in MailScanner to allow only these 2
>specific executable files and to continue denying all the others?

Yes. Add an allow rule near the top of filename.rules.conf, before the deny
rule for all .exe files.

allow   file1\.exe$     -       -
allow   file2\.exe$     -       -

deny   \.exe$          Windows/DOS
Executable
Executable DOS/Windows programs are dangerous in email

Note: make sure to use tabs not spaces between fields.

------------------------ MailScanner list ------------------------ To
unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the
archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).



More information about the MailScanner mailing list