Attachments

[Julian Field]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


On 14 Sep 2006, at 09:33, Colin Jack wrote:

>
>
>> -----Original Message-----
>> From: mailscanner-bounces at lists.mailscanner.info
>> [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf
>> Of Martin Hepworth
>> Sent: Thursday, September 14, 2006 9:24 AM
>> To: MailScanner discussion
>> Subject: Re: Attachments
>>
>> Colin Jack wrote:
>>> Hmmm ... it looks like MailScanner is refusing the
>> attachments because
>>> the .zip file contains unacceptable files ... e.g. .exe and .chm
>>>
>>> This seems a little over the zealous. We usually suggest to clients
>>> mailing .exe files (install files for example) to .zip them
>> up to get
>>> through filters!!
>>>
>>> What is the best way to deal with this? Can I tell
>> MailScanner not to
>>> look inside .zip files
>>>
>>> Thanks
>>>
>>> Colin
>>>
>>>> -----Original Message-----
>>>> From: mailscanner-bounces at lists.mailscanner.info
>>>> [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of
>>>> Denis Beauchemin
>>>> Sent: 13 September 2006 16:06
>>>> To: MailScanner discussion
>>>> Subject: Re: Attachments
>>>>
>>>> Colin Jack a écrit :
>>>>> Hope one of you MailScanner gurus can help!
>>>>>
>>>>> We are having clients complaining that some messages with
>>>> attachments
>>>>> aren't arriving ...
>>>>>
>>>>> example (which I have replicated):
>>>>>
>>>>> This morning I sent a message to a particular client who
>> is having
>>>>> problems.
>>>>> Attachment is a .zip of 2Mb
>>>>> Our MTA (Exchange) says it has been delivered successfully The
>>>>> receiving server maillog has no entries at all as far as I
>>>> can see I
>>>>> receive no bounce (yet) ..
>>>>>
>>>>> I have checked the filename.rules.conf and
>> filetype.rules.conf and
>>>>> they allow .zip files
>>>>>
>>>>> If I put the following entry at the top of the
>>>> filetype.rules.conf and
>>>>> filename.rules.conf
>>>>>
>>>>> allow	.	-	-
>>>>>
>>>>> then all works fine.
>>>>>
>>>>> I would like some filtering of files but cannot afford to have
>>>>> apparently innocuous files causing mail to evaporate ;)
>>>>>
>>>>> Thanks
>>>>>
>>>>> Colin
>>>>>
>>>>>
>>>> Colin,
>>>>
>>>> The explanation is probably in you maillog file.  Sendmail (or
>>>> whichever MTA you use) should log every connection it receives and
>>>> log things like envelope sender, time of day and message ID.  Then
>>>> grepping that message ID should tell you what happened to
>> your mail.
>>>>
>>>> Also you should put MS in verbose mode or run it in debug
>> mode to get
>>>> the full details about what is happening.
>>>>
>>>> Verbose mode (MailScanner.conf):
>>>> Log Spam = yes
>>>> Log Silent Viruses = yes
>>>> Log Dangerous HTML Tags = yes
>>>>
>>>> Denis
>>>>
>>
>> Colin
>> be aware of quite a few viruses hiding inside zip files..
>> hence this functionality.
>>
>> If you don't scan inside zip files you are opening a known
>> threat. Treat this risk accordingly..
>> --
>> Martin Hepworth
>> Senior Systems Administrator
>> Solid State Logic
>> Tel: +44 (0)1865 842300
>>
>
> Thanks for the heads up on this Martin.
>
> I agree with you.
>
> Difficult to know what to do really ... clients want to be able to
> attach stuff but don't want viruses.

AV programs will usually pick up the contents of zip files, they scan  
inside them anyway. So setting max archive depth = 0 isn't really  
dangerous.

>
> Colin
>
>
> -- 
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
> Before posting, read http://wiki.mailscanner.info/posting
>
> Support MailScanner development - buy the book off the website!

- -- 
Julian Field
MailScanner at ecs.soton.ac.uk



-----BEGIN PGP SIGNATURE-----
Version: PGP Desktop 9.5.0 (Build 1112)
Comment: (pgp-secured)
Charset: ISO-8859-1

wj8DBQFFCRo3EfZZRxQVtlQRAnB7AKCZXqLi4PX5a+LL1CgP1BMVTzmNKgCfaF22
smbzKSXhOTU3OXIqbFzcI0c=
=Clin
-----END PGP SIGNATURE-----

-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.
For all your IT requirements visit www.transtec.co.uk