Retreiving attachments

[Stephen Swaney]

> -----Original Message-----
> From: mailscanner-bounces at lists.mailscanner.info [mailto:mailscanner-
> bounces at lists.mailscanner.info] On Behalf Of Rob Morin
> Sent: Tuesday, August 08, 2006 9:35 AM
> To: MailScanner discussion
> Subject: Re: Retreiving attachments
> 
> On another note, has anyone come up with a way to retrieve quarantined
> attachments without the intervention of the sys admin? Meaning the end
> user can get them themselves?
> 
> I thought i heard a while back of some app to do this?
> 
> Have a good one!
> 
> Rob Morin
> Dido InterNet Inc.
> Montreal, Canada
> Http://www.dido.ca
> 514-990-4444
> 
> 
> 
> Golden, James wrote:
> > Thanks for the answer.  Sorry for the long delay in the thanks
> > departments.
> >
> > One more question here,
> >
> > Can I put more than one rules file in the Mailscanner.conf.  Currently
> > I am pointing to a ruleset already.
> >
> > Currently mine looks like this
> >
> > Filename Rules = %etc-dir%/filename.rules.conf
> >
> > so would it look like this?
> >
> > Filename Rules = %rules-dir%/filename.rules %etc-
> dir%/filename.rules.conf
> >
> > Or would I need to combine the .rules file into the .conf file
> >
> > Thanks for the help.
> >
> > James
> >
> >
> >
> > On Fri, 2006-08-04 at 17:50 -0400, Stephen Swaney wrote:
> >> > -----Original Message-----
> >> > From: mailscanner-bounces at lists.mailscanner.info <mailto:mailscanner-
> bounces at lists.mailscanner.info> [mailto:mailscanner-
> >> > bounces at lists.mailscanner.info
> <mailto:bounces at lists.mailscanner.info>] On Behalf Of Golden, James
> >> > Sent: Friday, August 04, 2006 5:10 PM
> >> > To: MailScanner discussion
> >> > Subject: Re: Retreiving attachments
> >> >
> >> > The attachments seem to be .doc or .xls or others and the client
> always
> >> > seems to be Outlook.
> >> >
> >> > On Fri, 2006-08-04 at 16:38 -0400, Golden, James wrote:
> >> >
> >> >
> >> > 	Hello,
> >> >
> >> > 	I've have been wasting my whole day trying to figure out how to do
> >> > this.  Can anyone could help besides telling me to install Mailwatch
> >> > (because it's not an option right now).
> >> >
> >> > 	I have messages that are being snagged by MailScanner because the
> >> > attachment is too large.  When I go to the directory the attachment
> is in
> >> > binary in the message.
> >> >
> >> > 	I tried using a sendmail -t < message, but of course it gets snagged
> >> > again by MS.  Is there an option I'm missing to store the attachments
> >> > separately from the message, is there a way to send this on without
> it
> >> > being scanned?  Is there a way to get the attachment out of the
> message?
> >> >
> >> > 	I need help soon as this is becoming a large issue today (about 6
> >> > end users) and my boss is hearing about it!
> >> >
> >> > 	Thanks,
> >> >
> >> > 	James
> >>
> >> You need to create a rule sets that exempt the localhost from
> attachment
> >> filename and filetype checking. If you have a Red Hat, CentOS or SuSE
> >> system, the following paths will be correct. They will vary on other
> systems
> >> but the same principals will work.
> >>
> >> First create two files:
> >>
> >> /etc/MailScanner/filename.rules.allowall.conf
> >> /etc/MailScanner/filetype.rules.allowall.conf
> >>
> >> The contents of each file will be identical:
> >>
> >> allow	*.	-	-
> >>
> >> The spaces MUST be Tabs so the contents of both files is really:
> >>
> >> allow<Tab>*.<Tab>->Tab>-
> >>
> >> Then create the file /etc/MailScanner/rules/filename.rules. The
> contents of
> >> this file should be:
> >>
> >> # Allow all filenames from localhost
> >> From: 127.0.0.0  /etc/MailScanner/filename.rules.allowall.conf
> >> # Default entry
> >> FromOrTo:       default         /etc/MailScanner/filename.rules.conf
> >>
> >> Then create the file /etc/MailScanner/rules/filetype.rules. The
> contents of
> >> this file should be:
> >>
> >> # Allow all filetypes from localhost
> >> From: 127.0.0.0  /etc/MailScanner/filetype.rules.allowall.conf
> >> # Default entry
> >> FromOrTo:       default         /etc/MailScanner/filetype.rules.conf
> >>
> >> Then edit /etc/MailScanner.conf to call the new rulesets. Change the
> setting
> >> for Filename Rules to be:
> >>
> >> Filename Rules = %rules-dir%/filename.rules
> >>
> >> And change the setting for Filetype Rules to be:
> >>
> >> Filetype Rules = %rules-dir%/filetype.rules
> >>
> >> Then reload MailScanner.
> >>
> >> You should now be able to release the files using the `sendmail -t <
> >> message` command without MailScanner re-quarantining the files.
> >>
> >> Have a nice weekend.
> >>
> >> Steve
> >> Stephen Swaney
> >> Fort Systems Ltd.
> >> stephen.swaney at fsl.com <mailto:stephen.swaney at fsl.com>
> >> www.fsl.com <http://www.fsl.com>

Open Source: MailWatch for MailScanner mailwatch.sourceforge.net
Commercial (based on MailScanner and MailWatch) DefenderMX www.fsl.com

Please contact me off list for more information about either.

Thanks,

Steve

Stephen Swaney
Fort Systems Ltd.
stephen.swaney at fsl.com
www.fsl.com