Syntax error in rule file.

[Martin Hepworth]

Ricardo

My 4.53.5 has the following at the start of this file.........


> more filename.rules.conf
#
# NOTE: Fields are separated by TAB characters --- Important!
#
# Syntax is allow/deny/deny+delete, then regular expression, then log text,
#           then user report text.
#

# Due to a bug in Outlook Express, you can make the 2nd from last extension
# be what is used to run the file. So very long filenames must be denied,
# regardless of the final extension.
deny    .{150,}                 Very long filename, possible OE attack
                                Very long filenames are good signs of
attacks against Microsoft e-mail packages

# JKF 01/01/2006 Another Microsoft security vulnerability
deny    \.wmf$                  Windows Metafile security vulnerability
                                Possible format attack in Windows

# JKF 04/01/2005 More Microsoft security vulnerabilities
deny    \.bmp$                  Windows bitmap file security vulnerability
                                Possible buffer overflow in Windows
deny    \.ico$                  Windows icon file security vulnerability
                                Possible buffer overflow in Windows


Watch out for line breaks etc in the above though... how does yours compare?

--
Martin Hepworth 
Snr Systems Administrator
Solid State Logic
Tel: +44 (0)1865 842300

> -----Original Message-----
> From: mailscanner-bounces at lists.mailscanner.info [mailto:mailscanner-
> bounces at lists.mailscanner.info] On Behalf Of Ricardo Aguiar
> Sent: 02 May 2006 18:18
> To: MailScanner discussion
> Subject: RE: Syntax error in rule file.
> 
> The filename.rules.conf is the original that cames with MailScanner
> 4.53.6-1.
> 
> 
> 
> 
> -----Original Message-----
> From: mailscanner-bounces at lists.mailscanner.info [mailto:mailscanner-
> bounces at lists.mailscanner.info] On Behalf Of Martin Hepworth
> Sent: terça-feira, 2 de Maio de 2006 18:11
> To: 'MailScanner discussion'
> Subject: RE: Syntax error in rule file.
> 
> Ricardo
> 
> And what does /etc/MailScanner/filename.rules.conf contain?
> 
> --
> Martin Hepworth
> Snr Systems Administrator
> Solid State Logic
> Tel: +44 (0)1865 842300
> 
> > -----Original Message-----
> > From: mailscanner-bounces at lists.mailscanner.info [mailto:mailscanner-
> > bounces at lists.mailscanner.info] On Behalf Of Ricardo Aguiar
> > Sent: 02 May 2006 18:07
> > To: mailscanner at lists.mailscanner.info
> > Subject: Syntax error in rule file.
> >
> > Hi,
> >
> > I just upgraded from version '4.51.6' to '4.53.6' and I'm using a rule
> > file to control filenames per domain.
> >
> > After running "MailScanner -lint" with the new version installed I get:
> >
> > Syntax error in line 1 of ruleset file
> > /etc/MailScanner/filename.rules.rules at
> > /usr/lib/MailScanner/MailScanner/Config.pm line 2265 Syntax error in
> > line 2 of ruleset file /etc/MailScanner/filename.rules.rules at
> > /usr/lib/MailScanner/MailScanner/Config.pm line 2265 Found syntax
> > errors in /etc/MailScanner/filename.rules.rules. at
> > /usr/lib/MailScanner/MailScanner/Config.pm line 2120 Read 717
> > hostnames from the phishing whitelist Checking for SpamAssassin errors
> > (if you use it)...
> > Using SpamAssassin results cache
> > Connected to SpamAssassin cache database SpamAssassin reported no
> > errors.
> >
> >
> > ### filename.rules.rules ###
> > FromOrTo:       domain.com      /etc/MailScanner/filename.no.rules.conf
> > FromOrTo:       default         /etc/MailScanner/filename.rules.conf
> >
> >
> > This file is unchanged and work perfectly with version '4.51.6'.
> >
> > Thanks in advanced for any help.
> >
> >  ______________________________________
> > | Ricardo d'Aguiar                     |
> > |                                      |-
> > | EMail .: ricardo at memosis.pt          |#|
> >  ¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯ #|
> > |#######################################|
> >   ¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯
> >
> > --
> > MailScanner mailing list
> > mailscanner at lists.mailscanner.info
> > http://lists.mailscanner.info/mailman/listinfo/mailscanner
> >
> > Before posting, read http://wiki.mailscanner.info/posting
> >
> > Support MailScanner development - buy the book off the website!
> 
> 
> **********************************************************************
> 
> This email and any files transmitted with it are confidential and intended
> solely for the use of the individual or entity to whom they are addressed.
> If you have received this email in error please notify the system manager.
> 
> This footnote confirms that this email message has been swept
> for the presence of computer viruses and is believed to be clean.
> 
> **********************************************************************
> 
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
> 
> Before posting, read http://wiki.mailscanner.info/posting
> 
> Support MailScanner development - buy the book off the website!
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
> 
> Before posting, read http://wiki.mailscanner.info/posting
> 
> Support MailScanner development - buy the book off the website!


**********************************************************************

This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom they
are addressed. If you have received this email in error please notify
the system manager.

This footnote confirms that this email message has been swept
for the presence of computer viruses and is believed to be clean.	

**********************************************************************