Allowing .pr3 files through
Michael Mansour
micoots at yahoo.com
Sat Dec 9 05:40:37 GMT 2006
Hi,
I reaaly hate top posting but am using the new Yahoo mail beta and it doesn't seem I can change this to good old ">" replies.
I tried this and get:
# file wimrpmd2.pr3
wimrpmd2.pr3: MS-DOS executable (EXE), OS/2 or MS Windows
So you're right, the server considers these files executables so they match against one of these:
deny ELF No executables No programs allowed
deny executable No executables No programs allowed
Hmm.. this now poses the question, how can I allow .pr3 files specifically but disallow all other executables?
Michael.
----- Original Message ----
From: Res <res at ausics.net>
To: MailScanner discussion <mailscanner at lists.mailscanner.info>
Sent: Saturday, 9 December, 2006 8:25:40 AM
Subject: Re: Allowing .pr3 files through
On Fri, 8 Dec 2006, Michael Mansour wrote:
> Hi Stef,
>
> I put the rule to the top of the list and the "bad content" was still tagged on the message.
>
> I believe this is tagged from the "filetype" rules area not "filename".
It might think its an executable PR3 can be used as postsrcipt extension
so I'm suprised it's not allowed with what you have
Filetype rules will over-ride filename everytime, filetype is based on
system " file " where filename I don't beleive uses file in tests and just
takes your word for it on filename, making filetype a much more sensible
approach to be the top level guardian.
try :
file /full/path/to/file.pr3
and see what it says it thinks it is
>
> If that's the case, what sort of rule would I need to put in to allow .pr3 files?
>
> The filetype fules I have for this domain are:
>
> allow text - -
> allow script - -
> allow archive - -
> allow postscript - -
> deny self-extract No self-extracting archives No self-extracting archives allowed
> deny ELF No executables No programs allowed
> deny executable No executables No programs allowed
> allow MPEG Yes MPEG movies MPEG movies allowed
> allow AVI Yes AVI movies AVI movies allowed
> allow MNG Yes MNG/PNG movies MNG movies allowed
> allow Quicktime Yes Quicktime movies Quicktime movies allowed
> allow ASF Yes Windows media Windows media files allowed
> allow BMP Yes BMP files BMP graphics files allowed
> deny Registry No Windows Registry entries No Windows Registry files allowed
>
> Thanks.
>
> Michael.
>
> Michael Mansour wrote:
>> I have their setup as:
>>
>> /etc/MailScanner/example.com.filename.rules.conf
>> allow \.pr3$ - -
>>
>> at the end of the file, but that does not seem to work.
>
> As far as I know, the rules file is parsed in order and stops when a
> match is found.
>
> Thefore, try putting it at the beginning instead, so that it matches for
> .pr3 and allows it before matching the general disallow rules for
> executables.
>
> Regards
>
> Stef
> Stefan Morrell | Operations Director
> Tel: 0845 3452820 | Alpha Omega Computers Ltd
> Fax: 0845 3452830 | Incorporating Level 5 Internet
> stef at aoc-uk.com | stef at l5net.net
>
--
Cheers
Res
"Just a world that we all must share, it's not enough just to stand and
stare, is it only a dream that there'll be no more turning away" - Floyd
--
MailScanner mailing list
mailscanner at lists.mailscanner.info
http://lists.mailscanner.info/mailman/listinfo/mailscanner
Before posting, read http://wiki.mailscanner.info/posting
Support MailScanner development - buy the book off the website!
Send instant messages to your online friends http://au.messenger.yahoo.com
More information about the MailScanner
mailing list