blocked ietf drafts.

Sat Jan 29 15:02:30 GMT 2005

    [ The following text is in the "ISO-8859-1" character set. ]
    [ Your display is set for the "US-ASCII" character set.  ]
    [ Some characters may be displayed incorrectly. ]

 From the MailScanner.conf file:

# It is only currently supported by Netscape 6 anyway, and the only people
# who use it are the IETF. So I would strongly advise leaving this
switched off.
# This can also be the filename of a ruleset.
Allow External Message Bodies = no

So you could set this to yes, but then any virus that was delivered to
your site via an external message body would get through and not be scanned.

I would advise your users to just use the web links in the messages to
get the documents, and explain to them the danger of allowing External
Message Bodies.

Pablo Allietti wrote:

>On Sat, Jan 29, 2005 at 02:42:50PM +0000, Julian Field wrote:
>
>
>>What does the AttachmentWarning.txt in the messages say?
>>
>>
>
>ohhhh. i not read the attachment warning.
>
>
>At Fri Jan 28 22:04:47 2005 the virus scanner said:
>   External message bodies cannot be scanned and are removed
>
>
>That is the problem External Body. :( sorry for not read this. i feel
>like a dumb...
>
>in this case, setting External Body = no    solve the problem? or i dont
>have a solution for that?
>
>
>
>
>
>>Pablo Allietti wrote:
>>
>>
>>
>>>On Sat, Jan 29, 2005 at 02:26:13PM +0000, Julian Field wrote:
>>>
>>>i think MailScanner block this messages for the name of the file with
>>>.-..- etc. ietf only send txts in the bodies not external bodies. i
>>>think i not explain very well. :)
>>>
>>>
>>>
>>>
>>>
>>>>You cannot safely scan messages with external bodies, which is why
>>>>MailScanner blocks them. You are asking for trouble if you allow them.
>>>>
>>>>Pablo Allietti wrote:
>>>>
>>>>
>>>>
>>>>
>>>>
>>>>>On Sat, Jan 29, 2005 at 02:15:19PM +0000, Julian Field wrote:
>>>>>
>>>>>
>>>>>
>>>>>
>>>>>
>>>>>
>>>>>>The IETF use obscure features of some RFC's for no apparent reason.
>>>>>>Their favourite is the "External Message Body" which no-one else in the
>>>>>>world uses, nor have ever used.
>>>>>>
>>>>>>Fortunately the IETF usually also put links in their messages to where
>>>>>>you can download the messages from a web server, which is what you
>>>>>>should do.
>>>>>>
>>>>>>
>>>>>>
>>>>>>
>>>>>>
>>>>>>
>>>>>yes julian i can download from the webserver, but in my company all of
>>>>>us received this messages and need to deliver correctly for your
>>>>>mailboxes. is any way to do this?
>>>>>
>>>>>
>>>>>
>>>>>
>>>>>
>>>>>
>>>>>
>>>>>
>>>>>>Pablo Allietti wrote:
>>>>>>
>>>>>>
>>>>>>
>>>>>>
>>>>>>
>>>>>>
>>>>>>
>>>>>>>On Fri, Jan 28, 2005 at 09:42:29PM -0800, Mark Nienberg wrote:
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>>>Pablo Allietti wrote:
>>>>>>>>
>>>>>>>>
>>>>>>>>
>>>>>>>>
>>>>>>>>
>>>>>>>>
>>>>>>>>
>>>>>>>>
>>>>>>>i do this change to yes. but nothing happend always messages mark as
>>>>>>>Blocked Content. :(
>>>>>>>
>>>>>>>another idea?
>>>>>>>
>>>>>>>thnaks
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>>>>hi all. i read the FAQs and the mailing list archives but i cant find
>>>>>>>>>any thing about the filename rules like ietf.
>>>>>>>>>
>>>>>>>>>i received many drafts a day from ietf and IAB community and the
>>>>>>>>>draft
>>>>>>>>>are like this
>>>>>>>>>
>>>>>>>>>draft-ietf-mpls-nodeid-subobject-04.txt
>>>>>>>>>draft-ignjatic-msec-mikey-rsa-r-00.txt
>>>>>>>>>draft-ietf-crisp-iris-dchk-02.txt
>>>>>>>>>
>>>>>>>>>
>>>>>>>>>are .txt all of them.
>>>>>>>>>
>>>>>>>>>i add a line in virus.scanning.rules
>>>>>>>>>
>>>>>>>>>FromOrTo:       *@ietf.org      no
>>>>>>>>>FromOrTo:       *@ops.ietf.org  no
>>>>>>>>>
>>>>>>>>>but nothing always this draft received by the subject {Blocked
>>>>>>>>>Content}
>>>>>>>>>and i need to go to spool to copy to my folder.
>>>>>>>>>
>>>>>>>>>do you have a solution for that ? is possible to allow this kind of
>>>>>>>>>filenames ?
>>>>>>>>>
>>>>>>>>>
>>>>>>>>>
>>>>>>>>>
>>>>>>>>>
>>>>>>>>>
>>>>>>>>>
>>>>>>>>>
>>>>>>>>>
>>>>>>>>>
>>>>>>>>>
>>>>>>>>The following is in MailScanner.conf.  Could this be the problem?
>>>>>>>>
>>>>>>>># Do you want to allow messages whose body is stored somewhere else on
>>>>>>>>the
>>>>>>>># internet, which is downloaded separately by the user's email
>>>>>>>>package?
>>>>>>>># There is no way to guarantee that the file fetched by the user's
>>>>>>>>email
>>>>>>>># package is free from viruses, as MailScanner never sees it.
>>>>>>>># This feature is dangerous as it can allow viruses to be fetched from
>>>>>>>># other Internet sites by a user's email package. The user would just
>>>>>>>># think it was a normal email attachment and would have been scanned
>>>>>>>>by
>>>>>>>># MailScanner.
>>>>>>>># It is only currently supported by Netscape 6 anyway, and the only
>>>>>>>>people
>>>>>>>># who it are the IETF. So I would strongly advise leaving this
>>>>>>>>switched
>>>>>>>>off.
>>>>>>>># This can also be the filename of a ruleset.
>>>>>>>>Allow External Message Bodies = no
>>>>>>>>
>>>>>>>>Mark Nienberg
>>>>>>>>
>>>>>>>>------------------------ MailScanner list ------------------------
>>>>>>>>To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
>>>>>>>>'leave mailscanner' in the body of the email.
>>>>>>>>Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
>>>>>>>>the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>>>>>>>>
>>>>>>>>Support MailScanner development - buy the book off the website!
>>>>>>>>
>>>>>>>>
>>>>>>>>
>>>>>>>>
>>>>>>>>
>>>>>>>>
>>>>>>>>
>>>>>>>>
>>>>>>>---end quoted text---
>>>>>>>
>>>>>>>--
>>>>>>>
>>>>>>>
>>>>>>>Pablo Allietti
>>>>>>>LACNIC
>>>>>>>--------------
>>>>>>>
>>>>>>>------------------------ MailScanner list ------------------------
>>>>>>>To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
>>>>>>>'leave mailscanner' in the body of the email.
>>>>>>>Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
>>>>>>>the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>>>>>>>
>>>>>>>Support MailScanner development - buy the book off the website!
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>--
>>>>>>Julian Field
>>>>>>www.MailScanner.info
>>>>>>Buy the MailScanner book at www.MailScanner.info/store
>>>>>>Professional Support Services at www.MailScanner.biz
>>>>>>MailScanner thanks transtec Computers for their support
>>>>>>
>>>>>>PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
>>>>>>
>>>>>>------------------------ MailScanner list ------------------------
>>>>>>To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
>>>>>>'leave mailscanner' in the body of the email.
>>>>>>Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
>>>>>>the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>>>>>>
>>>>>>Support MailScanner development - buy the book off the website!
>>>>>>
>>>>>>
>>>>>>
>>>>>>
>>>>>>
>>>>>>
>>>>>---end quoted text---
>>>>>
>>>>>--
>>>>>
>>>>>
>>>>>Pablo Allietti
>>>>>LACNIC
>>>>>--------------
>>>>>
>>>>>------------------------ MailScanner list ------------------------
>>>>>To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
>>>>>'leave mailscanner' in the body of the email.
>>>>>Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
>>>>>the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>>>>>
>>>>>Support MailScanner development - buy the book off the website!
>>>>>
>>>>>
>>>>>
>>>>>
>>>>>
>>>>>
>>>>>
>>>>--
>>>>Julian Field
>>>>www.MailScanner.info
>>>>Buy the MailScanner book at www.MailScanner.info/store
>>>>Professional Support Services at www.MailScanner.biz
>>>>MailScanner thanks transtec Computers for their support
>>>>
>>>>PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
>>>>
>>>>------------------------ MailScanner list ------------------------
>>>>To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
>>>>'leave mailscanner' in the body of the email.
>>>>Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
>>>>the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>>>>
>>>>Support MailScanner development - buy the book off the website!
>>>>
>>>>
>>>>
>>>>
>>>---end quoted text---
>>>
>>>--
>>>
>>>
>>>Pablo Allietti
>>>LACNIC
>>>--------------
>>>
>>>------------------------ MailScanner list ------------------------
>>>To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
>>>'leave mailscanner' in the body of the email.
>>>Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
>>>the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>>>
>>>Support MailScanner development - buy the book off the website!
>>>
>>>
>>>
>>>
>>>
>>--
>>Julian Field
>>www.MailScanner.info
>>Buy the MailScanner book at www.MailScanner.info/store
>>Professional Support Services at www.MailScanner.biz
>>MailScanner thanks transtec Computers for their support
>>
>>PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
>>
>>------------------------ MailScanner list ------------------------
>>To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
>>'leave mailscanner' in the body of the email.
>>Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
>>the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>>
>>Support MailScanner development - buy the book off the website!
>>
>>
>---end quoted text---
>
>--
>
>
>Pablo Allietti
>LACNIC
>--------------
>
>------------------------ MailScanner list ------------------------
>To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
>'leave mailscanner' in the body of the email.
>Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
>the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>
>Support MailScanner development - buy the book off the website!
>
>
>

--
Julian Field
www.MailScanner.info
Buy the MailScanner book at www.MailScanner.info/store
Professional Support Services at www.MailScanner.biz
MailScanner thanks transtec Computers for their support

PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!