[SOLVED] Retreiving attachments

Wed Aug 9 03:56:55 IST 2006

Sorry for being so stupid.  After looking through it again, I see what you were doing.  4 hours sleep a night catches up with you after awhile. 

Thanks for all the help. 

We will be implementing the Barracuda's appliances here in the next 5 weeks or so, that is why I am trying to "skate" by with this setup for now.  I figure what I am learning here will still help out when we move to those appliances. 

Although I have to say with the exception of the file attachment thing, since I upgraded and setup everything correctly (I think) everyone has been noticing the difference here!  In fact the guy who handles the antivirus wasn't too happy with me, because now more viruses are being caught as spam first.  Our virus numbers in email went from 200 - 300 a day to 1 - 10! 

Thanks all (Julian?!) for this fantastic software combination!.  It ROCKS! 

Thanks all who have helped with replies (especially Stephen), and have put up with me! 

James Golden 

----- Original Message ----- 
From: mailscanner-bounces at lists.mailscanner.info on behalf of Stephen Swaney  
Sent: Tue, 8/8/2006 10:55am 
To: 'MailScanner discussion'  
Subject: RE: Retreiving attachments 

> -----Original Message----- 
> From: mailscanner-bounces at lists.mailscanner.info [mailto:mailscanner- 
> bounces at lists.mailscanner.info] On Behalf Of Rob Morin 
> Sent: Tuesday, August 08, 2006 9:35 AM 
> To: MailScanner discussion 
> Subject: Re: Retreiving attachments 
>  
> On another note, has anyone come up with a way to retrieve quarantined 
> attachments without the intervention of the sys admin? Meaning the end 
> user can get them themselves? 
>  
> I thought i heard a while back of some app to do this? 
>  
> Have a good one! 
>  
> Rob Morin 
> Dido InterNet Inc. 
> Montreal, Canada 
> Http://www.dido.ca 
> 514-990-4444 
>  
>  
>  
> Golden, James wrote: 
> > Thanks for the answer.  Sorry for the long delay in the thanks 
> > departments. 
> > 
> > One more question here, 
> > 
> > Can I put more than one rules file in the Mailscanner.conf.  Currently 
> > I am pointing to a ruleset already. 
> > 
> > Currently mine looks like this 
> > 
> > Filename Rules = %etc-dir%/filename.rules.conf 
> > 
> > so would it look like this? 
> > 
> > Filename Rules = %rules-dir%/filename.rules %etc- 
> dir%/filename.rules.conf 
> > 
> > Or would I need to combine the .rules file into the .conf file 
> > 
> > Thanks for the help. 
> > 
> > James 
> > 
> > 
> > 
> > On Fri, 2006-08-04 at 17:50 -0400, Stephen Swaney wrote: 
> >> > -----Original Message----- 
> >> > From: mailscanner-bounces at lists.mailscanner.info <mailto:mailscanner- 
> bounces at lists.mailscanner.info> [mailto:mailscanner- 
> >> > bounces at lists.mailscanner.info 
> <mailto:bounces at lists.mailscanner.info>] On Behalf Of Golden, James 
> >> > Sent: Friday, August 04, 2006 5:10 PM 
> >> > To: MailScanner discussion 
> >> > Subject: Re: Retreiving attachments 
> >> > 
> >> > The attachments seem to be .doc or .xls or others and the client 
> always 
> >> > seems to be Outlook. 
> >> > 
> >> > On Fri, 2006-08-04 at 16:38 -0400, Golden, James wrote: 
> >> > 
> >> > 
> >> >     Hello, 
> >> > 
> >> >     I've have been wasting my whole day trying to figure out how to do 
> >> > this.  Can anyone could help besides telling me to install Mailwatch 
> >> > (because it's not an option right now). 
> >> > 
> >> >     I have messages that are being snagged by MailScanner because the 
> >> > attachment is too large.  When I go to the directory the attachment 
> is in 
> >> > binary in the message. 
> >> > 
> >> >     I tried using a sendmail -t < message, but of course it gets snagged 
> >> > again by MS.  Is there an option I'm missing to store the attachments 
> >> > separately from the message, is there a way to send this on without 
> it 
> >> > being scanned?  Is there a way to get the attachment out of the 
> message? 
> >> > 
> >> >     I need help soon as this is becoming a large issue today (about 6 
> >> > end users) and my boss is hearing about it! 
> >> > 
> >> >     Thanks, 
> >> > 
> >> >     James 
> >> 
> >> You need to create a rule sets that exempt the localhost from 
> attachment 
> >> filename and filetype checking. If you have a Red Hat, CentOS or SuSE 
> >> system, the following paths will be correct. They will vary on other 
> systems 
> >> but the same principals will work. 
> >> 
> >> First create two files: 
> >> 
> >> /etc/MailScanner/filename.rules.allowall.conf 
> >> /etc/MailScanner/filetype.rules.allowall.conf 
> >> 
> >> The contents of each file will be identical: 
> >> 
> >> allow    *.    -    - 
> >> 
> >> The spaces MUST be Tabs so the contents of both files is really: 
> >> 
> >> allow<Tab>*.<Tab>->Tab>- 
> >> 
> >> Then create the file /etc/MailScanner/rules/filename.rules. The 
> contents of 
> >> this file should be: 
> >> 
> >> # Allow all filenames from localhost 
> >> From: 127.0.0.0  /etc/MailScanner/filename.rules.allowall.conf 
> >> # Default entry 
> >> FromOrTo:       default         /etc/MailScanner/filename.rules.conf 
> >> 
> >> Then create the file /etc/MailScanner/rules/filetype.rules. The 
> contents of 
> >> this file should be: 
> >> 
> >> # Allow all filetypes from localhost 
> >> From: 127.0.0.0  /etc/MailScanner/filetype.rules.allowall.conf 
> >> # Default entry 
> >> FromOrTo:       default         /etc/MailScanner/filetype.rules.conf 
> >> 
> >> Then edit /etc/MailScanner.conf to call the new rulesets. Change the 
> setting 
> >> for Filename Rules to be: 
> >> 
> >> Filename Rules = %rules-dir%/filename.rules 
> >> 
> >> And change the setting for Filetype Rules to be: 
> >> 
> >> Filetype Rules = %rules-dir%/filetype.rules 
> >> 
> >> Then reload MailScanner. 
> >> 
> >> You should now be able to release the files using the `sendmail -t < 
> >> message` command without MailScanner re-quarantining the files. 
> >> 
> >> Have a nice weekend. 
> >> 
> >> Steve 
> >> Stephen Swaney 
> >> Fort Systems Ltd. 
> >> stephen.swaney at fsl.com <mailto:stephen.swaney at fsl.com> 
> >> www.fsl.com <http://www.fsl.com> 

Open Source: MailWatch for MailScanner mailwatch.sourceforge.net 
Commercial (based on MailScanner and MailWatch) DefenderMX www.fsl.com 

Please contact me off list for more information about either. 

Thanks, 

Steve 

Stephen Swaney 
Fort Systems Ltd. 
stephen.swaney at fsl.com 
www.fsl.com 

--  
MailScanner mailing list 
mailscanner at lists.mailscanner.info 
http://lists.mailscanner.info/mailman/listinfo/mailscanner 

Before posting, read http://wiki.mailscanner.info/posting 

Support MailScanner development - buy the book off the website!  