Filename block
Pedro Bordin Hoffmann - [M]orpheus
pedro.hoffmann at gmail.com
Thu Aug 14 12:39:17 IST 2008
Follows my confg of mailscanner:
I appreciate your help!
observi_2008:~# MailScanner -c
Table of Changed Values:
Option Name Default Current Value
===============================================================================
addenvelopefromheader yes no
allowformtags disarm yes
allowiframetags disarm yes
allowobjectcodebasetags disarm yes
allowpartialmessages no yes
allowpasswordprotectedarchives no yes
allowscripttags disarm yes
allowwebbugs disarm yes
alwayslookeduplast no FUNCTION:MailWatchLogging
attachmentextensionsnottozip .zip .rar .gz .tgz .mpg .mpe .mpeg .mp3
.rpm .zip .rar .gz .tgz .jpg .jpeg .mpg .mpe .mpeg .mp3 .rpm .htm .html .eml
attachmentwarningfilename VirusWarning.txt
Domain-Attachment-Warning.txt
clamavfullmessagescan no yes
clamdlockfile /var/run/clamav/clamd.pid
clamdsocket 127.0.0.1 /var/run/clamav/clamd.ctl
contentmodifysubject start yes
contentsubjecttext {Dangerous Content?} {Conteudo Perigoso}
customfunctionsdir
/usr/lib/MailScanner/MailScanner/CustomFunctions
/etc/MailScanner/CustomFunctions
definitespamishighscoring no yes
deletedbadcontentmessagereport
/etc/MailScanner/reports/en/deleted.content.message.txt
/etc/MailScanner/reports/pt_br/deleted.content.message.txt
deletedbadfilenamemessagereport
/etc/MailScanner/reports/en/deleted.filename.message.txt
/etc/MailScanner/reports/pt_br/deleted.filename.message.txt
deletedsizemessagereport
/etc/MailScanner/reports/en/deleted.size.message.txt
/etc/MailScanner/reports/pt_br/deleted.size.message.txt
deletedvirusmessagereport
/etc/MailScanner/reports/en/deleted.virus.message.txt
/etc/MailScanner/reports/pt_br/deleted.virus.message.txt
deliverdisinfectedfiles no yes
disarmedmodifysubject start no
disinfectedreport
/etc/MailScanner/reports/en/disinfected.report.txt
/etc/MailScanner/reports/pt_br/disinfected.report.txt
enablespambounce no RULESET:Default=no
envelopefromheader X-MailScanner-Envelope-From:
envelopetoheader X-MailScanner-Envelope-To:
filenamemodifysubject start yes
filenamerules
RULESET:Default=/etc/MailScanner/filename.rules.conf
filenamesubjecttext {Filename?} {Anexo}
highscoringmcpmodifysubject start yes
highscoringspamactions deliver header "X-Spam-Status: Yes"
bounce
highscoringspammodifysubject start yes
highscoringspamsubjecttext {Spam?} {Spam}
highspamassassinscore 10 FUNCTION:SQLHighSpamScores
hostname the MailScanner the Domain ()
ignoredwebbugfilenames spacer pixel.gif pixel.png
gap
ignorespamwhitelistifrecipientsexceed 20 100
incomingqueuedir /var/spool/mqueue.in/var/spool/postfix/hold
incomingworkgroup postfix
incomingworkuser postfix
inlinehtmlsignature
/etc/MailScanner/reports/en/inline.sig.html
/etc/MailScanner/reports/pt_br/inline.sig.html
inlinehtmlwarning
/etc/MailScanner/reports/en/inline.warning.html
/etc/MailScanner/reports/pt_br/inline.warning.html
inlinespamwarning
/etc/MailScanner/reports/en/inline.spam.warning.txt
/etc/MailScanner/reports/pt_br/inline.spam.warning.txt
inlinetextsignature
/etc/MailScanner/reports/en/inline.sig.txt
/etc/MailScanner/reports/pt_br/inline.sig.txt
inlinetextwarning
/etc/MailScanner/reports/en/inline.warning.txt
/etc/MailScanner/reports/pt_br/inline.warning.txt
isdefinitelynotspam no
FUNCTION:ByDomainSpamWhitelist
isdefinitelyspam no
FUNCTION:ByDomainSpamBlacklist
knownwebbugservers msgtag.com
languagestrings
/etc/MailScanner/reports/pt_br/languages.conf
localpostmaster postmaster spam at domain.com
lockfiledir /var/lock/subsys/MailScanner/
/var/lock/subsys/MailScanner
lognonspam no yes
logpermittedfilenames no yes
logsilentviruses no yes
logspam no yes
mailheader X-MailScanner:
mailscannerversionnumber 1.0.0 4.66.5
maxchildren 5 3
maximumarchivedepth 2 10
maximumattachmentspermessage 200 15
maximummessagesize 0 10485760
maxnormalqueuesize 800 1000
maxspamassassinsize 30000 200000
maxspamassassintimeouts 10 100
maxspamchecksize 150000 65000000
maxspamlisttimeouts 7 70
mcpheader X-MailScanner-MCPCheck:
X-Domain-MailScanner-MCPCheck:
mcpmaxspamassassinsize 100000 200000
mcpmaxspamassassintimeouts 20 50
mcpmodifysubject start yes
mcpspamassassintimeout 10 50
monitorsforclamavupdates /usr/local/share/clamav/*.cvd
/var/lib/clamav/*.cvd
mta sendmail postfix
nonforgingviruses Joke/ OF97/ WM97/ W97M/ eicar
nonspamactions deliver header "X-Spam-Status: No"
deliver
noticesfrom MailScanner Firewall Domain
noticesignature -- \nMailScanner\nEmail Virus Scanner\
nwww.mailscanner.info -- \nDomain Ltda\nObservi_2008\nwww.domain.com
noticesto postmaster spam at domain.com
notifysenders yes no
notifysendersofblockedfilenamesorfiletypes yes no
notifysendersofotherblockedcontent yes no
notifysendersofviruses no yes
outgoingqueuedir /var/spool/mqueue
/var/spool/postfix/incoming
phishingsubjecttext {Fraud?} {Fraud}
pidfile /var/run/MailScanner.pid
/var/run/MailScanner/MailScanner.pid
quarantinegroup www-data
quarantinepermissions 0600 0777
quarantinesilentviruses no yes
quarantineuser postfix
quarantinewholemessage no yes
recipientmcpreport
/etc/MailScanner/reports/en/recipient.mcp.report.txt
/etc/MailScanner/reports/pt_br/recipient.mcp.report.txt
recipientspamreport
/etc/MailScanner/reports/en/recipient.spam.report.txt
/etc/MailScanner/reports/pt_br/recipient.spam.report.txt
rejectionreport
/etc/MailScanner/reports/en/message.rejection.report.txt
/etc/MailScanner/reports/pt_br/rejection.report.txt
requiredspamassassinscore 6 FUNCTION:SQLSpamScores
runasgroup 0 postfix
runasuser 0 postfix
senderbadcontentreport
/etc/MailScanner/reports/en/sender.content.report.txt
/etc/MailScanner/reports/pt_br/sender.content.report.txt
senderbadfilenamereport
/etc/MailScanner/reports/en/sender.filename.report.txt
/etc/MailScanner/reports/pt_br/sender.filename.report.txt
sendererrorreport
/etc/MailScanner/reports/en/sender.error.report.txt
/etc/MailScanner/reports/pt_br/sender.error.report.txt
sendermcpreport
/etc/MailScanner/reports/en/sender.mcp.report.txt
/etc/MailScanner/reports/pt_br/sender.mcp.report.txt
sendersizereport
/etc/MailScanner/reports/en/sender.size.report.txt
/etc/MailScanner/reports/pt_br/sender.size.report.txt
senderspamassassinreport
/etc/MailScanner/reports/en/sender.spam.sa.report.txt
/etc/MailScanner/reports/pt_br/sender.spam.sa.report.txt
senderspamlistreport
/etc/MailScanner/reports/en/sender.spam.rbl.report.txt
/etc/MailScanner/reports/pt_br/sender.spam.rbl.report.txt
senderspamreport
/etc/MailScanner/reports/en/sender.spam.report.txt
/etc/MailScanner/reports/pt_br/sender.spam.report.txt
sendervirusreport
/etc/MailScanner/reports/en/sender.virus.report.txt
/etc/MailScanner/reports/pt_br/sender.virus.report.txt
sendmail2 /usr/sbin/sendmail /usr/sbin/sendmail
-DOUTGOING
signatureimagefilename
/etc/MailScanner/reports/pt_br/sig.jpg
signatureimageimgfilename signature.jpg
signmessagesalreadyprocessed no yes
spamactions deliver header "X-Spam-Status: Yes"
forward spam at domain.com
spamassassinautowhitelist yes no
spamassassindefaultrulesdir /etc/spamassassin
spamassassininstallprefix /usr/bin
spamassassinlocalrulesdir
/etc/spamassassin/RuleDuJour
spamassassinruleactions
/etc/MailScanner/rules/spam.rules
spamassassinsiterulesdir /etc/spamassassin
spamassassintimeout 75 200
spamassassinuserstatedir /var/lib/MailScanner
spamheader X-MailScanner-SpamCheck:
spammodifysubject start yes
spamscoreheader X-MailScanner-SpamScore:
spamsubjecttext {Spam?} {Spam}
storedbadcontentmessagereport
/etc/MailScanner/reports/en/stored.content.message.txt
/etc/MailScanner/reports/pt_br/stored.content.message.txt
storedbadfilenamemessagereport
/etc/MailScanner/reports/en/stored.filename.message.txt
/etc/MailScanner/reports/pt_br/stored.filename.message.txt
storedsizemessagereport
/etc/MailScanner/reports/en/stored.size.message.txt
/etc/MailScanner/reports/pt_br/stored.size.message.txt
storedvirusmessagereport
/etc/MailScanner/reports/en/stored.virus.message.txt
/etc/MailScanner/reports/pt_br/stored.virus.message.txt
treatinvalidwatermarkswithnosenderasspam spam nothing
usewatermarking yes no
virusmodifysubject start yes
virusscanners auto clamav
virusscannertimeout 300 3000
virussubjecttext {Virus?} {Virus}
watermarkheader MailScanner-NULL-Check:
X-domain-MailScanner-Watermark:
watermarksecret Watermark-secret Domain-Secret
webbugreplacement
http://www.mailscanner.info/images/1x1spacer.gif
http://www.sng.ecs.soton.ac.uk/mailscanner/images/1x1spacer.gif
2008/8/13 Hugo van der Kooij <hvdkooij at vanderkooij.org>
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
>
> Pedro Bordin Hoffmann - [M]orpheus wrote:
> | When recieving an e-mail and I have a filename blocking rule, like to
> | block jpg.
> |
> | Why it doesnt send me the e-mail only removing the attachment?
> |
> | It just blocks the whole e-mail...
> |
> | How may I still recieve the message, just with the attach removed?
>
> That would involve rebuilding the message instead of just blocking it.
> Picking it apart is much easier then rebuilding it again with some of
> the pieces missing.
>
> What did you change in the configuration to activate blocking?
> What is the output of:
> MailScanner -c
>
>
>
> Hugo.
>
> - --
> hvdkooij at vanderkooij.org http://hugo.vanderkooij.org/
> PGP/GPG? Use: http://hugo.vanderkooij.org/0x58F19981.asc
>
> A: Yes.
> >Q: Are you sure?
> >>A: Because it reverses the logical flow of conversation.
> >>>Q: Why is top posting frowned upon?
>
> Bored? Click on http://spamornot.org/ and rate those images.
>
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.7 (GNU/Linux)
>
> iD8DBQFIo00qBvzDRVjxmYERAiLvAJ0c99ElhDYGvR+P3KWIOvyyOVhnwQCgpVxg
> owa8XtnY/7OWZz7hb1Iuucg=
> =aAoZ
> -----END PGP SIGNATURE-----
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
> Before posting, read http://wiki.mailscanner.info/posting
>
> Support MailScanner development - buy the book off the website!
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20080814/1ef21f57/attachment.html
More information about the MailScanner
mailing list