File type rules

Paul R. Ganci ganci at nurdog.com
Wed Mar 1 02:59:52 GMT 2006


I have been trying to turn off the damn RTF rules and have yet to be 
successful. From my filename.rules.conf I commented out:

# JKF 11/01/2006 Another Microsoft security vulnerability
#deny   winmail\.dat$           Windows security 
vulnerability                 No Outlook Rich Text Format messages due 
to security hole, use HTML instead

 From my filetype.rules.conf I commented out:

#deny   TNEF            Windows security vulnerability         No 
Outlook Rich Text Format messages due to security hole, use HTML instead
#deny   Transport Neutral Encapsulation Format          Windows security 
vulnerability           No Outlook Rich Text Format messages due to 
security hole, use HTML instead

and yet MailScanner continues to block these:

Feb  7 14:31:49 mx02 MailScanner[32634]: Virus and Content Scanning: 
Starting
Feb  7 14:31:52 mx02 MailScanner[32701]: Expanding TNEF archive at 
/var/spool/MailScanner/incoming/32701/k17LV2EK006288/winmail.dat
Feb  7 14:31:52 mx02 MailScanner[32701]: Virus and Content Scanning: 
Starting
Feb  7 14:31:55 mx02 MailScanner[32701]: Filename Checks: Windows 
security vulnerability (k17LV2EK006288 winmail.dat)
Feb  7 14:31:55 mx02 MailScanner[32701]: Other Checks: Found 1 problems
Feb  7 14:31:56 mx02 MailScanner[32701]: Saved infected "winmail.dat" to 
/var/spool/MailScanner/quarantine/20060207/k17LV2EK006288

Yes, I restarted MailScanner after changing these rules. Please, what do 
I have to do to get MailScanner to stop blocking these?

Thanks.

-- 
Paul (ganci at nurdog.com)



More information about the MailScanner mailing list