[SOLVED] Retreiving attachments

Wed Aug 9 09:11:43 IST 2006

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

If you like MailScanner that much, why are you going to deploy those  
Barracudas?
A commercial setup of MailScanner (such as DefenderMX from  
www.fsl.com) will outperform Barracudas and is considerably cheaper.  
There is a detailed feature and price comparison on www.fsl.com.

On 9 Aug 2006, at 03:56, Golden, James wrote:

> Sorry for being so stupid.  After looking through it again, I see  
> what you were doing.  4 hours sleep a night catches up with you  
> after awhile.
>
> Thanks for all the help.
>
> We will be implementing the Barracuda's appliances here in the next  
> 5 weeks or so, that is why I am trying to "skate" by with this  
> setup for now.  I figure what I am learning here will still help  
> out when we move to those appliances.
>
> Although I have to say with the exception of the file attachment  
> thing, since I upgraded and setup everything correctly (I think)  
> everyone has been noticing the difference here!  In fact the guy  
> who handles the antivirus wasn't too happy with me, because now  
> more viruses are being caught as spam first.  Our virus numbers in  
> email went from 200 - 300 a day to 1 - 10!
>
> Thanks all (Julian?!) for this fantastic software combination!.  It  
> ROCKS!
>
> Thanks all who have helped with replies (especially Stephen), and  
> have put up with me!
>
> James Golden
>
>
>
> ----- Original Message -----
> From: mailscanner-bounces at lists.mailscanner.info on behalf of  
> Stephen Swaney
> Sent: Tue, 8/8/2006 10:55am
> To: 'MailScanner discussion'
> Subject: RE: Retreiving attachments
>
>
>> -----Original Message-----
>> From: mailscanner-bounces at lists.mailscanner.info [mailto:mailscanner-
>> bounces at lists.mailscanner.info] On Behalf Of Rob Morin
>> Sent: Tuesday, August 08, 2006 9:35 AM
>> To: MailScanner discussion
>> Subject: Re: Retreiving attachments
>>
>> On another note, has anyone come up with a way to retrieve  
>> quarantined
>> attachments without the intervention of the sys admin? Meaning the  
>> end
>> user can get them themselves?
>>
>> I thought i heard a while back of some app to do this?
>>
>> Have a good one!
>>
>> Rob Morin
>> Dido InterNet Inc.
>> Montreal, Canada
>> Http://www.dido.ca
>> 514-990-4444
>>
>>
>>
>> Golden, James wrote:
>>> Thanks for the answer.  Sorry for the long delay in the thanks
>>> departments.
>>>
>>> One more question here,
>>>
>>> Can I put more than one rules file in the Mailscanner.conf.   
>>> Currently
>>> I am pointing to a ruleset already.
>>>
>>> Currently mine looks like this
>>>
>>> Filename Rules = %etc-dir%/filename.rules.conf
>>>
>>> so would it look like this?
>>>
>>> Filename Rules = %rules-dir%/filename.rules %etc-
>> dir%/filename.rules.conf
>>>
>>> Or would I need to combine the .rules file into the .conf file
>>>
>>> Thanks for the help.
>>>
>>> James
>>>
>>>
>>>
>>> On Fri, 2006-08-04 at 17:50 -0400, Stephen Swaney wrote:
>>>>> -----Original Message-----
>>>>> From: mailscanner-bounces at lists.mailscanner.info  
>>>>> <mailto:mailscanner-
>> bounces at lists.mailscanner.info> [mailto:mailscanner-
>>>>> bounces at lists.mailscanner.info
>> <mailto:bounces at lists.mailscanner.info>] On Behalf Of Golden, James
>>>>> Sent: Friday, August 04, 2006 5:10 PM
>>>>> To: MailScanner discussion
>>>>> Subject: Re: Retreiving attachments
>>>>>
>>>>> The attachments seem to be .doc or .xls or others and the client
>> always
>>>>> seems to be Outlook.
>>>>>
>>>>> On Fri, 2006-08-04 at 16:38 -0400, Golden, James wrote:
>>>>>
>>>>>
>>>>>     Hello,
>>>>>
>>>>>     I've have been wasting my whole day trying to figure out  
>>>>> how to do
>>>>> this.  Can anyone could help besides telling me to install  
>>>>> Mailwatch
>>>>> (because it's not an option right now).
>>>>>
>>>>>     I have messages that are being snagged by MailScanner  
>>>>> because the
>>>>> attachment is too large.  When I go to the directory the  
>>>>> attachment
>> is in
>>>>> binary in the message.
>>>>>
>>>>>     I tried using a sendmail -t < message, but of course it  
>>>>> gets snagged
>>>>> again by MS.  Is there an option I'm missing to store the  
>>>>> attachments
>>>>> separately from the message, is there a way to send this on  
>>>>> without
>> it
>>>>> being scanned?  Is there a way to get the attachment out of the
>> message?
>>>>>
>>>>>     I need help soon as this is becoming a large issue today  
>>>>> (about 6
>>>>> end users) and my boss is hearing about it!
>>>>>
>>>>>     Thanks,
>>>>>
>>>>>     James
>>>>
>>>> You need to create a rule sets that exempt the localhost from
>> attachment
>>>> filename and filetype checking. If you have a Red Hat, CentOS or  
>>>> SuSE
>>>> system, the following paths will be correct. They will vary on  
>>>> other
>> systems
>>>> but the same principals will work.
>>>>
>>>> First create two files:
>>>>
>>>> /etc/MailScanner/filename.rules.allowall.conf
>>>> /etc/MailScanner/filetype.rules.allowall.conf
>>>>
>>>> The contents of each file will be identical:
>>>>
>>>> allow    *.    -    -
>>>>
>>>> The spaces MUST be Tabs so the contents of both files is really:
>>>>
>>>> allow<Tab>*.<Tab>->Tab>-
>>>>
>>>> Then create the file /etc/MailScanner/rules/filename.rules. The
>> contents of
>>>> this file should be:
>>>>
>>>> # Allow all filenames from localhost
>>>> From: 127.0.0.0  /etc/MailScanner/filename.rules.allowall.conf
>>>> # Default entry
>>>> FromOrTo:       default         /etc/MailScanner/ 
>>>> filename.rules.conf
>>>>
>>>> Then create the file /etc/MailScanner/rules/filetype.rules. The
>> contents of
>>>> this file should be:
>>>>
>>>> # Allow all filetypes from localhost
>>>> From: 127.0.0.0  /etc/MailScanner/filetype.rules.allowall.conf
>>>> # Default entry
>>>> FromOrTo:       default         /etc/MailScanner/ 
>>>> filetype.rules.conf
>>>>
>>>> Then edit /etc/MailScanner.conf to call the new rulesets. Change  
>>>> the
>> setting
>>>> for Filename Rules to be:
>>>>
>>>> Filename Rules = %rules-dir%/filename.rules
>>>>
>>>> And change the setting for Filetype Rules to be:
>>>>
>>>> Filetype Rules = %rules-dir%/filetype.rules
>>>>
>>>> Then reload MailScanner.
>>>>
>>>> You should now be able to release the files using the `sendmail - 
>>>> t <
>>>> message` command without MailScanner re-quarantining the files.
>>>>
>>>> Have a nice weekend.
>>>>
>>>> Steve
>>>> Stephen Swaney
>>>> Fort Systems Ltd.
>>>> stephen.swaney at fsl.com <mailto:stephen.swaney at fsl.com>
>>>> www.fsl.com <http://www.fsl.com>
>
> Open Source: MailWatch for MailScanner mailwatch.sourceforge.net
> Commercial (based on MailScanner and MailWatch) DefenderMX www.fsl.com
>
> Please contact me off list for more information about either.
>
> Thanks,
>
> Steve
>
> Stephen Swaney
> Fort Systems Ltd.
> stephen.swaney at fsl.com
> www.fsl.com
>
> --  
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
> Before posting, read http://wiki.mailscanner.info/posting
>
> Support MailScanner development - buy the book off the website!
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
> Before posting, read http://wiki.mailscanner.info/posting
>
> Support MailScanner development - buy the book off the website!

- -- 
Julian Field
MailScanner at ecs.soton.ac.uk

-----BEGIN PGP SIGNATURE-----
Version: PGP SDK 3.7.0
Charset: US-ASCII

wj8DBQFE2ZjAEfZZRxQVtlQRAtbQAKDSbEKggJwSMy75sFjxi8pPr2PYGgCaA0pu
A+YoIVWhhVgszzkXQPHrq+A=
=7c6C
-----END PGP SIGNATURE-----

-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.
MailScanner thanks transtec Computers for their support.