Incoming attachments with multiple "." in the name

Scott Silva ssilva at SGVWATER.COM
Thu Dec 1 17:58:58 GMT 2005


    [ The following text is in the "windows-1252" character set. ]
    [ Your display is set for the "US-ASCII" character set.  ]
    [ Some characters may be displayed incorrectly. ]

Jason Williams spake the following on 12/1/2005 9:47 AM:
> Just a quick question.
> 
>  
> 
> Recently, our investors have been sending us spreadsheet files with
> information that is important to us. However, they have been naming the
> files with multiple ^Óperiods^Ô in them. For example:
> 
>  
> 
> Todays.file.01.xls
> 
>  
> 
> These files get stripped off at the mailgateway as ClamAV:
> 
>  
> 
> Filename Checks: Found possible filename hiding (jB1EO4rT076234
> 051201.F1.WFL.xls)
> 
>  
> 
> Is there a way around this, but ensuring that no true hidden viruses get
> to the internal network? Is there some type of customization I can make
> so this won^Òt happen, and my users won^Òt freak out?
> 
>  
> 
> I appreciate it.
This isn't from clamav. This is from the filename checks in MailScanner.
You could disable this, maybe dangerous maybe not, or get your users to
use some other de-limiter like - or _ instead of a "dot". If you are
using the filetype checks, you might get away with disabling this.

-- 

/-----------------------\           |~~\_____/~~\__  |
| MailScanner; The best |___________ \N1____====== )-+
| protection on the net!|                   ~~~|/~~  |
\-----------------------/                      ()

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the Wiki (http://wiki.mailscanner.info/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!



More information about the MailScanner mailing list