Filetypes and filenames not being checked
dave.list at pixelhammer.com
Wed Jul 26 21:58:03 IST 2006
Julian Field wrote:
> Can anyone else reproduce this behaviour?
> I sure can't :-(
I would wager I've done something very stupid. Woods, trees, that whole
For what it's worth, some things are installed, but not showing up in
MailScanner -v. MailTools, IO-Stringy, Storable, File-Spec. I am double
checking to make sure they did in fact install.
bash-2.05b# MailScanner -v
FreeBSD avhost2.tls.net 5.2.1-RELEASE FreeBSD 5.2.1-RELEASE #0: Mon Feb
23 20:45:55 GMT 2004
root at wv1u.btc.adaptec.com:/usr/obj/usr/src/sys/GENERIC i386
This is Perl version 5.006002 (5.6.2)
This is MailScanner version 4.54.6
Module versions are:
Optional module versions are:
bash-2.05b# MailScanner --lint
Read 719 hostnames from the phishing whitelist
Config: calling custom init function MailWatchLogging
Config: calling custom init function SQLHighSpamScores
Config: calling custom init function SQLWhitelist
Config: calling custom init function SQLBlacklist
Config: calling custom init function SQLSpamScores
Checking for SpamAssassin errors (if you use it)...
Using SpamAssassin results cache
Connected to SpamAssassin cache database
SpamAssassin reported no errors.
MailScanner.conf says "Virus Scanners = clamav"
Found these virus scanners installed: clamav, bitdefender
> DAve wrote:
>> DAve wrote:
>>> DAve wrote:
>>>> Good morning,
>>>> I have just had a user bring to my attention that since I upgraded
>>>> to 4.54.x we are no longer stopping filenames with double suffixes
>>>> or banned suffixes.
>>>> I tried a test and sure enough two files went right through,
>>>> test.svx.doc and test.scr. I double checked my conf files and
>>>> everything looks good, mailscanner --lint shows no errors.
>>>> I haven't changed anything in the conf file except to add MailWatch.
>>>> I went through the change log and docs and didn't see anything that
>>>> I thought would affect me.
>>>> Has there been a change in how the filename.rules.conf files work?
>>> Hmm, double checked the filename.rules.conf and filetype.rules.conf
>>> and they looked fine (yes, tabs not spaces).
>>> Just on a whim I changed the MailScanner.conf to
>>> Filename Rules = %rules-dir%/user.filename.rules
>>> #Filename Rules = %etc-dir%/filename.rules.conf
>>> Then created %rules-dir%/user.filename.rules as
>>> # Default, disallow for all others
>>> To: default
>>> From: default
>>> And filename.deny.rules.conf is a copy of a fresh filename.rules.conf
>>> from the install source.
>>> Still test.svx.doc gets through as does test.scr. mailscanner --lint
>>> still shows no issues.
>>> I tried to run in debug mode but I got no unusual output. So I
>>> stopped MailScanner and called with the debug switch with no change.
>>> Is there a way to run in debug and output to the terminal?
>> Well, I've tried using full paths in the Filename Rules = ,
>> Filename Rules = /usr/local/etc/MailScanner/rules/user.filename.rules
>> I've tried adding a file suffix to Deny Filenames =
>> Deny Filenames = \.scr$ \.com$ \.pif$ \.exe$ \.cab$ \.ico$
>> Nothing works, test.scr just flies right through. I'm pretty much left
>> with reinstall on all my servers unless I can find a way to see what
>> is happening.
Three years now I've asked Google why they don't have a
logo change for Memorial Day. Why do they choose to do logos
for other non-international holidays, but nothing for
Maybe they forgot who made that choice possible.
More information about the MailScanner