Sophos and Encrypted Attachments

[Mike Kercher]

Installing...thanks Julian!

Mike
 

-----Original Message-----
From: MailScanner mailing list [mailto:MAILSCANNER at JISCMAIL.AC.UK] On Behalf
Of Julian Field
Sent: Tuesday, July 19, 2005 2:15 PM
To: MAILSCANNER at JISCMAIL.AC.UK
Subject: Re: Sophos and Encrypted Attachments

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

In which case, you may be interested in this from the ChangeLog

2/7/2005 New in Version 4.43.8
==============================
* New Features and Improvements *
- - "Allowed Sophos Error Messages" now works for SophosSAVI scanner as well
  as the command-line Sophos scanner.

Mike Kercher wrote:

>mailscanner-4.41.3-1
>
>-----Original Message-----
>From: MailScanner mailing list [mailto:MAILSCANNER at JISCMAIL.AC.UK] On 
>Behalf Of Julian Field
>Sent: Tuesday, July 19, 2005 1:35 PM
>To: MAILSCANNER at JISCMAIL.AC.UK
>Subject: Re: Sophos and Encrypted Attachments
>
>* PGP Bad Signature, Signed: 07/19/05 at 19:35:01
>
>What version are you running?
>
>Mike Kercher wrote:
>
>  
>
>>I've been getting complaints of encrypted attachments being rejected 
>>by SophosSAVI because they are encrypted.  I've added a ruleset to 
>>allow encrypted attachments from certain domains and added a "Sophos 
>>Allowed Error Messages" entry for "File was encrypted", but they are 
>>still
>>    
>>
>rejected.
>  
>
>>Jul 18 09:37:55 avwall2 MailScanner[26790]: SophosSAVI::ERROR:: File 
>>was encrypted (530):: ./j6IEbXCt027886/Cing 615 @ McMullen.xls Jul 18
>>20:29:11 avwall2 MailScanner[31191]: SophosSAVI::ERROR:: File was 
>>encrypted (530):: ./j6J1So5V000931/20050718155617H0004711.PDF
>>
>>These attachments must be encrypted to comply with the 
>>Graham-Leach-Bliley Act here in the US.  I think my last resort is to 
>>not virus scan emails from specified email addresses, but I'd hate to 
>>have a forging virus come through using one of these whitelisted email 
>>addresses.  Did I miss something elsewhere in my config?
>>
>>Mike
>>
>>------------------------ MailScanner list ------------------------ To 
>>unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
>>'leave mailscanner' in the body of the email.
>>Before posting, read the Wiki (http://wiki.mailscanner.info/) and the 
>>archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>>
>>Support MailScanner development - buy the book off the website!
>> 
>>
>>    
>>
>
>--
>Julian Field
>www.MailScanner.info
>Buy the MailScanner book at www.MailScanner.info/store Professional 
>Support Services at www.MailScanner.biz MailScanner thanks transtec 
>Computers for their support
>
>PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
>
>
>* Julian Field <Jules at Jules.fm>
>* 0x1415B654 (L)
>
>
>------------------------ MailScanner list ------------------------ To 
>unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
>'leave mailscanner' in the body of the email.
>Before posting, read the Wiki (http://wiki.mailscanner.info/) and the 
>archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>
>Support MailScanner development - buy the book off the website!
>
>------------------------ MailScanner list ------------------------ To 
>unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
>'leave mailscanner' in the body of the email.
>Before posting, read the Wiki (http://wiki.mailscanner.info/) and the 
>archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>
>Support MailScanner development - buy the book off the website!
>  
>

- --
Julian Field
www.MailScanner.info
Buy the MailScanner book at www.MailScanner.info/store Professional Support
Services at www.MailScanner.biz MailScanner thanks transtec Computers for
their support

PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654


-----BEGIN PGP SIGNATURE-----
Version: PGP Desktop 9.0.1 (Build 2185)

iQA/AwUBQt1RRRH2WUcUFbZUEQJcbwCdFNm1S5qx5fuFi+1nLX+Twr/2kmIAoI2i
yqWzo0LAIg3XYyvPNVhghqpk
=9Hb1
-----END PGP SIGNATURE-----

------------------------ MailScanner list ------------------------ To
unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the Wiki (http://wiki.mailscanner.info/) and the
archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the Wiki (http://wiki.mailscanner.info/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!