[SOLVED] Retreiving attachments

Golden, James jgolden at ci.grand-rapids.mi.us
Fri Aug 11 21:25:05 IST 2006


It wasn't my decision.  I work on contract, and it was the employers
decision.

On Wed, 2006-08-09 at 09:11 +0100, Julian Field wrote:

> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> If you like MailScanner that much, why are you going to deploy those  
> Barracudas?
> A commercial setup of MailScanner (such as DefenderMX from  
> www.fsl.com) will outperform Barracudas and is considerably cheaper.  
> There is a detailed feature and price comparison on www.fsl.com.
> 
> On 9 Aug 2006, at 03:56, Golden, James wrote:
> 
> > Sorry for being so stupid.  After looking through it again, I see  
> > what you were doing.  4 hours sleep a night catches up with you  
> > after awhile.
> >
> > Thanks for all the help.
> >
> > We will be implementing the Barracuda's appliances here in the next  
> > 5 weeks or so, that is why I am trying to "skate" by with this  
> > setup for now.  I figure what I am learning here will still help  
> > out when we move to those appliances.
> >
> > Although I have to say with the exception of the file attachment  
> > thing, since I upgraded and setup everything correctly (I think)  
> > everyone has been noticing the difference here!  In fact the guy  
> > who handles the antivirus wasn't too happy with me, because now  
> > more viruses are being caught as spam first.  Our virus numbers in  
> > email went from 200 - 300 a day to 1 - 10!
> >
> > Thanks all (Julian?!) for this fantastic software combination!.  It  
> > ROCKS!
> >
> > Thanks all who have helped with replies (especially Stephen), and  
> > have put up with me!
> >
> > James Golden
> >
> >
> >
> > ----- Original Message -----
> > From: mailscanner-bounces at lists.mailscanner.info on behalf of  
> > Stephen Swaney
> > Sent: Tue, 8/8/2006 10:55am
> > To: 'MailScanner discussion'
> > Subject: RE: Retreiving attachments
> >
> >
> >> -----Original Message-----
> >> From: mailscanner-bounces at lists.mailscanner.info [mailto:mailscanner-
> >> bounces at lists.mailscanner.info] On Behalf Of Rob Morin
> >> Sent: Tuesday, August 08, 2006 9:35 AM
> >> To: MailScanner discussion
> >> Subject: Re: Retreiving attachments
> >>
> >> On another note, has anyone come up with a way to retrieve  
> >> quarantined
> >> attachments without the intervention of the sys admin? Meaning the  
> >> end
> >> user can get them themselves?
> >>
> >> I thought i heard a while back of some app to do this?
> >>
> >> Have a good one!
> >>
> >> Rob Morin
> >> Dido InterNet Inc.
> >> Montreal, Canada
> >> Http://www.dido.ca
> >> 514-990-4444
> >>
> >>
> >>
> >> Golden, James wrote:
> >>> Thanks for the answer.  Sorry for the long delay in the thanks
> >>> departments.
> >>>
> >>> One more question here,
> >>>
> >>> Can I put more than one rules file in the Mailscanner.conf.   
> >>> Currently
> >>> I am pointing to a ruleset already.
> >>>
> >>> Currently mine looks like this
> >>>
> >>> Filename Rules = %etc-dir%/filename.rules.conf
> >>>
> >>> so would it look like this?
> >>>
> >>> Filename Rules = %rules-dir%/filename.rules %etc-
> >> dir%/filename.rules.conf
> >>>
> >>> Or would I need to combine the .rules file into the .conf file
> >>>
> >>> Thanks for the help.
> >>>
> >>> James
> >>>
> >>>
> >>>
> >>> On Fri, 2006-08-04 at 17:50 -0400, Stephen Swaney wrote:
> >>>>> -----Original Message-----
> >>>>> From: mailscanner-bounces at lists.mailscanner.info  
> >>>>> <mailto:mailscanner-
> >> bounces at lists.mailscanner.info> [mailto:mailscanner-
> >>>>> bounces at lists.mailscanner.info
> >> <mailto:bounces at lists.mailscanner.info>] On Behalf Of Golden, James
> >>>>> Sent: Friday, August 04, 2006 5:10 PM
> >>>>> To: MailScanner discussion
> >>>>> Subject: Re: Retreiving attachments
> >>>>>
> >>>>> The attachments seem to be .doc or .xls or others and the client
> >> always
> >>>>> seems to be Outlook.
> >>>>>
> >>>>> On Fri, 2006-08-04 at 16:38 -0400, Golden, James wrote:
> >>>>>
> >>>>>
> >>>>>     Hello,
> >>>>>
> >>>>>     I've have been wasting my whole day trying to figure out  
> >>>>> how to do
> >>>>> this.  Can anyone could help besides telling me to install  
> >>>>> Mailwatch
> >>>>> (because it's not an option right now).
> >>>>>
> >>>>>     I have messages that are being snagged by MailScanner  
> >>>>> because the
> >>>>> attachment is too large.  When I go to the directory the  
> >>>>> attachment
> >> is in
> >>>>> binary in the message.
> >>>>>
> >>>>>     I tried using a sendmail -t < message, but of course it  
> >>>>> gets snagged
> >>>>> again by MS.  Is there an option I'm missing to store the  
> >>>>> attachments
> >>>>> separately from the message, is there a way to send this on  
> >>>>> without
> >> it
> >>>>> being scanned?  Is there a way to get the attachment out of the
> >> message?
> >>>>>
> >>>>>     I need help soon as this is becoming a large issue today  
> >>>>> (about 6
> >>>>> end users) and my boss is hearing about it!
> >>>>>
> >>>>>     Thanks,
> >>>>>
> >>>>>     James
> >>>>
> >>>> You need to create a rule sets that exempt the localhost from
> >> attachment
> >>>> filename and filetype checking. If you have a Red Hat, CentOS or  
> >>>> SuSE
> >>>> system, the following paths will be correct. They will vary on  
> >>>> other
> >> systems
> >>>> but the same principals will work.
> >>>>
> >>>> First create two files:
> >>>>
> >>>> /etc/MailScanner/filename.rules.allowall.conf
> >>>> /etc/MailScanner/filetype.rules.allowall.conf
> >>>>
> >>>> The contents of each file will be identical:
> >>>>
> >>>> allow    *.    -    -
> >>>>
> >>>> The spaces MUST be Tabs so the contents of both files is really:
> >>>>
> >>>> allow<Tab>*.<Tab>->Tab>-
> >>>>
> >>>> Then create the file /etc/MailScanner/rules/filename.rules. The
> >> contents of
> >>>> this file should be:
> >>>>
> >>>> # Allow all filenames from localhost
> >>>> From: 127.0.0.0  /etc/MailScanner/filename.rules.allowall.conf
> >>>> # Default entry
> >>>> FromOrTo:       default         /etc/MailScanner/ 
> >>>> filename.rules.conf
> >>>>
> >>>> Then create the file /etc/MailScanner/rules/filetype.rules. The
> >> contents of
> >>>> this file should be:
> >>>>
> >>>> # Allow all filetypes from localhost
> >>>> From: 127.0.0.0  /etc/MailScanner/filetype.rules.allowall.conf
> >>>> # Default entry
> >>>> FromOrTo:       default         /etc/MailScanner/ 
> >>>> filetype.rules.conf
> >>>>
> >>>> Then edit /etc/MailScanner.conf to call the new rulesets. Change  
> >>>> the
> >> setting
> >>>> for Filename Rules to be:
> >>>>
> >>>> Filename Rules = %rules-dir%/filename.rules
> >>>>
> >>>> And change the setting for Filetype Rules to be:
> >>>>
> >>>> Filetype Rules = %rules-dir%/filetype.rules
> >>>>
> >>>> Then reload MailScanner.
> >>>>
> >>>> You should now be able to release the files using the `sendmail - 
> >>>> t <
> >>>> message` command without MailScanner re-quarantining the files.
> >>>>
> >>>> Have a nice weekend.
> >>>>
> >>>> Steve
> >>>> Stephen Swaney
> >>>> Fort Systems Ltd.
> >>>> stephen.swaney at fsl.com <mailto:stephen.swaney at fsl.com>
> >>>> www.fsl.com <http://www.fsl.com>
> >
> > Open Source: MailWatch for MailScanner mailwatch.sourceforge.net
> > Commercial (based on MailScanner and MailWatch) DefenderMX www.fsl.com
> >
> > Please contact me off list for more information about either.
> >
> > Thanks,
> >
> > Steve
> >
> > Stephen Swaney
> > Fort Systems Ltd.
> > stephen.swaney at fsl.com
> > www.fsl.com
> >
> > --  
> > MailScanner mailing list
> > mailscanner at lists.mailscanner.info
> > http://lists.mailscanner.info/mailman/listinfo/mailscanner
> >
> > Before posting, read http://wiki.mailscanner.info/posting
> >
> > Support MailScanner development - buy the book off the website!
> >
> > --
> > MailScanner mailing list
> > mailscanner at lists.mailscanner.info
> > http://lists.mailscanner.info/mailman/listinfo/mailscanner
> >
> > Before posting, read http://wiki.mailscanner.info/posting
> >
> > Support MailScanner development - buy the book off the website!
> 
> - -- 
> Julian Field
> MailScanner at ecs.soton.ac.uk
> 
> 
> 
> -----BEGIN PGP SIGNATURE-----
> Version: PGP SDK 3.7.0
> Charset: US-ASCII
> 
> wj8DBQFE2ZjAEfZZRxQVtlQRAtbQAKDSbEKggJwSMy75sFjxi8pPr2PYGgCaA0pu
> A+YoIVWhhVgszzkXQPHrq+A=
> =7c6C
> -----END PGP SIGNATURE-----
> 
> -- 
> This message has been scanned for viruses and
> dangerous content by MailScanner, and is
> believed to be clean.
> MailScanner thanks transtec Computers for their support.
> 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20060811/a8cb7f5d/attachment.html


More information about the MailScanner mailing list