Warning Is Attachment

[Julian Field]

This appears this way in Outlook due to faulty inline-file handling in 
Outlook.

On 18/05/2009 10:28, Nelson Vale wrote:
> Hi all,
>
> I've got MailScanner 4.58.9 running on my system and I'am having some 
> trouble with the "Warning Is Attachment" option, because no matter the 
> value in it I always receive warnings as attachments.
>
> Is there anything I can do to fix this?
>
>
> Tanks in advance for any help
>
>
> Nelson Vale
>
>
>
> My configuration is as follows:
>
> %org-name% = MailScanner
> %org-long-name% = MailScanner
> %web-site% = www.mailscanner.info <http://www.mailscanner.info>
> %etc-dir% = /usr/lib/mailscanner/etc
> %report-dir% = /usr/lib/mailscanner/etc/reports/en
> %rules-dir% = /usr/lib/mailscanner/etc/rules
> %mcp-dir% = /usr/lib/mailscanner/etc/mcp
> Max Children = 5
> Run As User =
> Run As Group =
> Queue Scan Interval = 10
> Incoming Queue Dir = /var/spool/mqueue.in <http://mqueue.in>
> Outgoing Queue Dir = /var/spool/mqueue
> Incoming Work Dir = /var/spool/MailScanner/incoming
> Quarantine Dir = /var/spool/MailScanner/quarantine
> PID file = /var/run/MailScanner.pid
> Restart Every = 14400
> MTA = sendmail
> Sendmail = /usr/sbin/sendmail
> Sendmail2 = /usr/sbin/sendmail
> Incoming Work User =
> Incoming Work Group =
> Incoming Work Permissions = 0600
> Quarantine User =
> Quarantine Group =
> Quarantine Permissions = 0600
> Max Unscanned Bytes Per Scan = 100m
> Max Unsafe Bytes Per Scan = 50m
> Max Unscanned Messages Per Scan = 30
> Max Unsafe Messages Per Scan = 30
> Max Normal Queue Size = 800
> Scan Messages = yes
> Reject Message = no
> Maximum Attachments Per Message = 200
> Expand TNEF = no
> Use TNEF Contents = replace
> Deliver Unparsable TNEF = yes
> TNEF Expander = /usr/bin/tnef --maxsize=100000000
> TNEF Timeout = 120
> File Command = /usr/bin/file
> File Timeout = 20
> Gunzip Command = /bin/gunzip
> Gunzip Timeout = 50
> Unrar Command = /usr/bin/unrar
> Unrar Timeout = 50
> Find UU-Encoded Files = no
> Maximum Message Size = %rules-dir%/max.message.size.rules
> Maximum Attachment Size = -1
> Minimum Attachment Size = -1
> Maximum Archive Depth = 5
> Find Archives By Content = yes
> Virus Scanning = yes
> Virus Scanners = clamav
> Virus Scanner Timeout = 300
> Deliver Disinfected Files = yes
> Silent Viruses = HTML-IFrame All-Viruses
> Still Deliver Silent Viruses = yes
> Non-Forging Viruses = Joke/ OF97/ WM97/ W97M/ eicar
> Block Encrypted Messages = no
> Block Unencrypted Messages = no
> Allow Password-Protected Archives = yes
> Allowed Sophos Error Messages =
> Sophos IDE Dir = /usr/lib/sav
> Sophos Lib Dir = /usr/lib
> Monitors For Sophos Updates = /usr/lib/sav/*ides.zip
> ###Monitors for ClamAV Updates = /usr/local/share/clamav/*.cvd
> ClamAVmodule Maximum Recursion Level = 8
> ClamAVmodule Maximum Files = 1000
> ClamAVmodule Maximum File Size = 10000000 # (10 Mbytes)
> ClamAVmodule Maximum Compression Ratio = 250
> Dangerous Content Scanning = yes
> Allow Partial Messages = no
> Allow External Message Bodies = no
> Find Phishing Fraud = yes
> Also Find Numeric Phishing = yes
> Use Stricter Phishing Net = yes
> Highlight Phishing Fraud = yes
> Phishing Safe Sites File = %etc-dir%/phishing.safe.sites.conf
> Country Sub-Domains List = %etc-dir%/country.domains.conf
> Allow IFrame Tags = no
> ###########Log IFrame Tags = no
> Allow Form Tags = no
> Allow Script Tags = disarm
> Allow WebBugs = disarm
> Ignored Web Bug Filenames = spacer pixel.gif pixel.png gap
> Web Bug Replacement = 
> http://www.sng.ecs.soton.ac.uk/mailscanner/images/1x1spacer.gif
> Allow Object Codebase Tags = no
> Convert Dangerous HTML To Text = no
> Convert HTML To Text = no
> Allow Filenames =
> Deny Filenames =
> Filename Rules = %etc-dir%/filename.rules.conf
> Allow Filetypes =
> Deny Filetypes =
> Filetype Rules = %etc-dir%/filetype.rules.conf
> Quarantine Infections = yes
> Quarantine Silent Viruses = yes
> Quarantine Modified Body = no
> Quarantine Whole Message = yes
> Quarantine Whole Messages As Queue Files = yes
> Keep Spam And MCP Archive Clean = no
> Language Strings = %report-dir%/languages.conf
> Rejection Report = %report-dir%/rejection.report.txt
> Deleted Bad Content Message Report  = 
> %report-dir%/deleted.content.message.txt
> Deleted Bad Filename Message Report = 
> %report-dir%/deleted.filename.message.txt
> Deleted Virus Message Report        = 
> %report-dir%/deleted.virus.message.txt
> Deleted Size Message Report        = %report-dir%/deleted.size.message.txt
> Stored Bad Content Message Report  = 
> %report-dir%/stored.content.message.txt
> Stored Bad Filename Message Report = 
> %report-dir%/stored.filename.message.txt
> Stored Virus Message Report        = %report-dir%/stored.virus.message.txt
> Stored Size Message Report        = %report-dir%/stored.size.message.txt
> Disinfected Report = %report-dir%/disinfected.report.txt
> Inline HTML Signature = %report-dir%/inline.sig.html
> Inline Text Signature = %report-dir%/inline.sig.txt
> Inline HTML Warning = %report-dir%/inline.warning.html
> Inline Text Warning = %report-dir%/inline.warning.txt
> Sender Content Report        = %report-dir%/sender.content.report.txt
> Sender Error Report        = %report-dir%/sender.error.report.txt
> Sender Bad Filename Report = %report-dir%/sender.filename.report.txt
> Sender Virus Report        = %report-dir%/sender.virus.report.txt
> Sender Size Report         = %report-dir%/sender.size.report.txt
> Hide Incoming Work Dir = yes
> Include Scanner Name In Reports = yes
> Mail Header = X-%org-name%-MailScanner:
> Spam Header = X-%org-name%-MailScanner-SpamCheck:
> Spam Score Header = X-%org-name%-MailScanner-SpamScore:
> Information Header = X-%org-name%-MailScanner-Information:
> Add Envelope From Header = yes
> Add Envelope To Header = no
> Envelope From Header = X-%org-name%-MailScanner-From:
> Envelope To Header = X-%org-name%-MailScanner-To:
> Spam Score Character = s
> SpamScore Number Instead Of Stars = no
> Minimum Stars If On Spam List = 0
> Clean Header Value       = Found to be clean
> Infected Header Value    = Found to be infected
> Disinfected Header Value = Disinfected
> Information Header Value = Please contact the ISP for more information
> Detailed Spam Report = yes
> Include Scores In SpamAssassin Report = yes
> Multiple Headers = append
> Hostname = the %org-name% ($HOSTNAME) MailScanner
> Sign Messages Already Processed = no
> Sign Clean Messages = yes
> Mark Infected Messages = yes
> Mark Unscanned Messages = yes
> Unscanned Header Value = Not scanned: please contact your Internet 
> E-Mail Service Provider for details
> Remove These Headers = X-Mozilla-Status: X-Mozilla-Status2:
> Deliver Cleaned Messages = yes
> Notify Senders = yes
> Notify Senders Of Viruses = yes
> Notify Senders Of Blocked Filenames Or Filetypes = yes
> Notify Senders Of Blocked Size Attachments = no
> Notify Senders Of Other Blocked Content = yes
> Never Notify Senders Of Precedence = list bulk
> Scanned Modify Subject = no # end
> Scanned Subject Text = {Scanned}
> Virus Modify Subject = yes
> Virus Subject Text = {Virus?}
> Filename Modify Subject = start
> Filename Subject Text = {Filename?}
> Content Modify Subject = start
> Content Subject Text = {Dangerous Content?}
> Size Modify Subject = start
> Size Subject Text = {Size}
> Disarmed Modify Subject = start
> Disarmed Subject Text = {Disarmed}
> Phishing Modify Subject = no
> Phishing Subject Text = {Fraud?}
> Spam Modify Subject = start
> Spam Subject Text = {Spam?}
> High Scoring Spam Modify Subject = yes
> High Scoring Spam Subject Text = {Spam?}
> Warning Is Attachment = no
> Attachment Warning Filename = %org-name%-Attachment-Warning.txt
> Attachment Encoding Charset = us-ascii
> Archive Mail =
> Send Notices = no
> Notices Include Full Headers = no
> Hide Incoming Work Dir in Notices = no
> Notice Signature = -- \nMailScanner\nEmail Virus 
> Scanner\nwww.mailscanner.info <http://nwww.mailscanner.info>
> Notices From = MailScanner
> Notices To = nelsonduvall at gmail.com <mailto:nelsonduvall at gmail.com>
> Local Postmaster = postmaster
> Local Postmaster = postmaster
> Spam List Definitions = %etc-dir%/spam.lists.conf
> Virus Scanner Definitions = %etc-dir%/virus.scanners.conf
> Spam Checks = yes
> Spam List = A0 A1 A2 A3 A4
> Spam Domain List =
> Spam Lists To Be Spam = 1
> Spam Lists To Reach High Score = 5
> Spam List Timeout = 10
> Max Spam List Timeouts = 7
> Spam List Timeouts History = 10
> Is Definitely Not Spam = %rules-dir%/spam.whitelist.rules
> Is Definitely Spam = no
> Definite Spam Is High Scoring = no
> Ignore Spam Whitelist If Recipients Exceed = 20
> Max Spam Check Size = 150000
> Use SpamAssassin = no
> Max SpamAssassin Size = 40k
> Required SpamAssassin Score = 5
> High SpamAssassin Score = 20
> SpamAssassin Auto Whitelist = yes
> #SpamAssassin Prefs File = %etc-dir%/spam.assassin.prefs.conf
> Always Include SpamAssassin Report = no
> SpamAssassin Timeouts History = 30
> Check SpamAssassin If On Spam List = no
> Spam Score = yes
> Cache SpamAssassin Results = yes
> SpamAssassin Cache Database File = 
> /var/spool/MailScanner/incoming/SpamAssassin.cache.db
> Rebuild Bayes Every = 0
> Wait During Bayes Rebuild = no
> Use Custom Spam Scanner = no
> Max Custom Spam Scanner Size = 20k
> Custom Spam Scanner Timeout = 20
> Max Custom Spam Scanner Timeouts = 10
> Custom Spam Scanner Timeout History = 20
> Spam Actions = deliver
> High Scoring Spam Actions = deliver header "X-Spam-Status: Yes"
> Non Spam Actions = deliver header "X-Spam-Status: No"
> Sender Spam Report         = %report-dir%/sender.spam.report.txt
> Sender Spam List Report    = %report-dir%/sender.spam.rbl.report.txt
> Sender SpamAssassin Report = %report-dir%/sender.spam.sa.report.txt
> Inline Spam Warning = %report-dir%/inline.spam.warning.txt
> Recipient Spam Report = %report-dir%/recipient.spam.report.txt
> Enable Spam Bounce = %rules-dir%/bounce.rules
> Bounce Spam As Attachment = no
> Syslog Facility = mail
> Log Speed = no
> Log Spam = no
> Log Non Spam = no
> Log Permitted Filenames = no
> Log Permitted Filetypes = no
> Log Silent Viruses = no
> Log Dangerous HTML Tags = no
> SpamAssassin User State Dir =
> SpamAssassin Install Prefix =
> SpamAssassin Site Rules Dir = # /etc/mail/spamassassin
> SpamAssassin Local Rules Dir =
> SpamAssassin Local State Dir = # /var/lib/spamassassin
> SpamAssassin Default Rules Dir =
> MCP Checks = no
> First Check = mcp
> MCP Required SpamAssassin Score = 1
> MCP High SpamAssassin Score = 10
> MCP Error Score = 1
> MCP Header = X-%org-name%-MailScanner-MCPCheck:
> Non MCP Actions = deliver
> MCP Actions = deliver
> High Scoring MCP Actions = deliver
> Bounce MCP As Attachment = no
> MCP Modify Subject = start
> MCP Subject Text = {MCP?}
> High Scoring MCP Modify Subject = start
> High Scoring MCP Subject Text = {MCP?}
> Is Definitely MCP = no
> Is Definitely Not MCP = no
> Definite MCP Is High Scoring = no
> Always Include MCP Report = no
> Detailed MCP Report = yes
> Include Scores In MCP Report = no
> Log MCP = no
> MCP Max SpamAssassin Timeouts = 20
> MCP Max SpamAssassin Size = 100k
> MCP SpamAssassin Timeout = 10
> MCP SpamAssassin Prefs File = %mcp-dir%/mcp.spam.assassin.prefs.conf
> MCP SpamAssassin User State Dir =
> MCP SpamAssassin Local Rules Dir = %mcp-dir%
> MCP SpamAssassin Default Rules Dir = %mcp-dir%
> MCP SpamAssassin Install Prefix = %mcp-dir%
> Recipient MCP Report = %report-dir%/recipient.mcp.report.txt
> Sender MCP Report = %report-dir%/sender.mcp.report.txt
> Use Default Rules With Multiple Recipients = no
> Spam Score Number Format = %d
> MailScanner Version Number = 4.58.9
> SpamAssassin Cache Timings = 1800,300,10800,172800,600
> Debug = no
> Debug SpamAssassin = no
> Run In Foreground = no
> Always Looked Up Last = no
> Always Looked Up Last After Batch = no
> Deliver In Background = yes
> Delivery Method = batch
> Split Exim Spool = no
> Lockfile Dir = /tmp
> Custom Functions Dir = 
> /usr/lib/mailscanner/lib/MailScanner/CustomFunctions
> Lock Type =
> Minimum Code Status = supported

Jules

-- 
Julian Field MEng CITP CEng
www.MailScanner.info
Buy the MailScanner book at www.MailScanner.info/store

Need help customising MailScanner?
Contact me!
Need help fixing or optimising your systems?
Contact me!
Need help getting you started solving new requirements from your boss?
Contact me!

PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
Follow me at twitter.com/JulesFM and twitter.com/MailScanner


-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.