more on zero byte exe files

Jeff A. Earickson jaearick at colby.edu
Tue Jan 30 15:45:32 CET 2007


Gang,

Since the file is zero bytes, named exe, and does not trigger
a sophos/clam virus event, I am having a lot of the following
messages outgoing:

    From: MailScanner <postmaster at colby.edu>
    To: upwcc at wwsolutions.demon.co.uk
    Subject: Warning: E-mail viruses detected

    Our e-mail content detector has just been triggered by a message you sent:
      To: llivshi at colby.edu
      Subject: Wine and Roses
      Date: Tue Jan 30 09:18:57 2007

    One or more of the attachments (Greeting Card.exe) are on
    the list of unacceptable attachments for this site and will not have
    been delivered.

    Consider renaming the files to avoid this constraint.

    The virus detector said this about the message:
    Report: Report: MailScanner: Executable DOS/Windows programs are dangerous
    in email (Greeting Card.exe)

which will make me (and MailScanner) *real* popular in the real world.
I don't want to remove the exe check in filename.rules.conf, which is
the only quick way I can think of to shut up MailScanner.  Help....

Jeff Earickson
Colby College


More information about the MailScanner mailing list