Filetypes and filenames not being checked
dhawal at netmagicsolutions.com
Fri Jul 21 18:41:29 IST 2006
> DAve wrote:
>> Good morning,
>> I have just had a user bring to my attention that since I upgraded to
>> 4.54.x we are no longer stopping filenames with double suffixes or
>> banned suffixes.
>> I tried a test and sure enough two files went right through,
>> test.svx.doc and test.scr. I double checked my conf files and
>> everything looks good, mailscanner --lint shows no errors.
>> I haven't changed anything in the conf file except to add MailWatch. I
>> went through the change log and docs and didn't see anything that I
>> thought would affect me.
>> Has there been a change in how the filename.rules.conf files work?
Do you have 'Scan Messages = yes' & 'Dangerous Content Scanning = yes'?
for an incomplete list of dependencies..
> Hmm, double checked the filename.rules.conf and filetype.rules.conf and
> they looked fine (yes, tabs not spaces).
> Just on a whim I changed the MailScanner.conf to
> Filename Rules = %rules-dir%/user.filename.rules
> #Filename Rules = %etc-dir%/filename.rules.conf
> Then created %rules-dir%/user.filename.rules as
> # Default, disallow for all others
> To: default /usr/local/etc/MailScanner/filename.deny.rules.conf
> From: default /usr/local/etc/MailScanner/filename.deny.rules.conf
> And filename.deny.rules.conf is a copy of a fresh filename.rules.conf
> from the install source.
> Still test.svx.doc gets through as does test.scr. mailscanner --lint
> still shows no issues.
> I tried to run in debug mode but I got no unusual output. So I stopped
> MailScanner and called with the debug switch with no change. Is there a
> way to run in debug and output to the terminal?
More information about the MailScanner