Can't block wmv files

Jason Ede J.Ede at
Wed Nov 28 15:07:46 GMT 2007

Umm... Is the file being sent by Outlook/exchange? If so then it could be in a winmail.dat attachment rather than as a .wmv file. If so its probably worth using the tnef expander to expand it out although I'm not sure if thats done before or after the filetype checking...


From: mailscanner-bounces at [mailscanner-bounces at] On Behalf Of Michael Mansour [micoots at]
Sent: 28 November 2007 14:59
To: MailScanner discussion
Subject: Re: Can't block wmv files

Hi Julian,

Julian Field <MailScanner at> wrote:
Hash: SHA1

shuttlebox wrote:
> On Nov 27, 2007 3:08 PM, Michael Mansour wrote:
>> %etc-dir%/
>> and %etc-dir%/
> Those filenames don't match what you have in your rulesets, note the
> missing .conf at the end:
>> FromOrTo: *
>> /etc/MailScanner/
>> FromOrTo: default /etc/MailScanner/filename.rules.conf
>> FromOrTo: *
>> /etc/MailScanner/
>> FromOrTo: default /etc/MailScanner/filetype.rules.conf
> Also, you do have tabs as whitespace in both files and no strange
> end-of-lines, common if you edit the files in Windows?
The only places you need tabs instead of spaces are in the and filetype/name.rules.conf files.
You can use any whitespace in *.rules files.
I'm using:


I've spent the last 5 hours trouble-shooting this problem (in addition to the 2 hours I spent last night) and I believe MS is broken with this filename/filetype blocking now.

What I did was globally set the /etc/MailScanner/filename.rules.conf and /etc/MailScanner/filetype.conf to deny (I also did deny+delete) all movie files and tested for the swf extension too.

Movie files were still let through even when this was a global setting.

I then tried simply attaching something I knew 100% would fail, a web link (.lnk file), and it passed through fine.

What sort of thing / setting in MS would allow this to happen? ie. allowing anything through?



Make the switch to the world's best email. Get the new Yahoo!7 Mail now<*>.
-------------- next part --------------
An HTML attachment was scrubbed...

More information about the MailScanner mailing list