MailScanner hates Microsoft office

[Stephen Swaney]

On Nov 4, 2009, at 4:48 AM, Arjan Melein wrote:

> For some reason a lot of our office files are being held hostage by  
> MailScanner by the filetype filter for various reasons which to me  
> dont make any sense.
> These range from the file being identified as an executable to AVI  
> movies.
> When I do 'file -i' on it, it'll always show 'application/msword;  
> charset=binary'
>
> So far i've tried setting 'unpack microsoft documents' to no and  
> removed 'ole' from the 'Archives Are' setting, but that did not  
> change anything.
> Am I overlooking anything ?
>
> -
> Arjan



To accomodate Word 2007, add the following lines to your  
filename.rule.conf file being very careful to use "tabs" instead of  
"spaces" between the fields in each line that is not commented out.  
Alswo you may have different ideas about which file types to allow or  
deny so you should review carefully before implementing.

# Word 2007 File Type Extensions
# -------------------------------------------
allow	\.docx$	Word 2007 XML Document	     Word 2007 XML Document
deny 	\.docmx$	Word 2007 XML Macro-Enabled Document	     Word 2007 XML  
Macro-Enabled Document
deny	\.dotx$	Word 2007 XML Template	     Word 2007 XML Template
deny	\.dotm$	Word 2007 XML Macro-Enabled Template	     Word 2007 XML  
Macro-Enabled Template

# Excel 2007 File Type Extension
# -------------------------------------------
allow	\.xlsx$	Excel 2007 XML Workbook	     Excel 2007 XML Workbook
deny	\.xlsm$	Excel 2007 XML Macro-Enabled Workbook	     Excel 2007 XML  
Macro-Enabled Workbook
deny	\.xltx$	Excel 2007 XML Template	     Excel 2007 XML Template
deny	\.xltm$	Excel 2007 XML Macro-Enabled Template	     Excel 2007 XML  
Macro-Enabled Template
deny	\.xlsb$	Excel 2007 binary workbook 	     Excel 2007 binary workbook
deny	\.xlam$	Excel 2007 XML Macro-Enabled Add-In	     Excel 2007 XML  
Macro-Enabled Add-In

# PowerPoint 2007 File Type Extension
# -------------------------------------------
allow	\.pptx$	PowerPoint 2007 XML Presentation	     PowerPoint 2007  
XML Presentation
deny	\.pptm$	PowerPoint 2007 Macro-Enabled XML Presentation	      
PowerPoint 2007 Macro-Enabled XML Presentation
deny	\.potx$	PowerPoint 2007 XML Template	     PowerPoint 2007 XML  
Template
deny	\.potm$	PowerPoint 2007 Macro-Enabled XML Template	      
PowerPoint 2007 Macro-Enabled XML Template
deny	\.ppam$	PowerPoint 2007 Macro-Enabled XML Add-In	     PowerPoint  
2007 Macro-Enabled XML Add-In
deny	\.ppsx$	PowerPoint 2007 XML Show	     PowerPoint 2007 XML Show
deny	\.ppsm$	PowerPoint 2007 Macro-Enabled XML Show	     PowerPoint  
2007 Macro-Enabled XML Show
# ----------- End Insert

You probably also want to change or delete the defaults for the  
"repetitive filename extensions", like the ones below, to accommodate  
the tendency of the Office programs to add some new attachment with  
aaaaa.xxx.yyy filenames.

      # Repeated file extension, e.g. blah.zip.zip
      allow   (\.[a-z0-9]{3})\1$      -       -

      # Other double file extensions. This catches any hidden filenames.
      deny    \.[a-z][a-z0-9]{2,3}\s*\.[a-z0-9]{3}$   Found possible  
filename hiding  Attempt to hide real filename extension

Best regards,

Steve

-- 
Steve Swaney
steve at fsl.com
www.fsl.com
The most accurate and cost effective anti-spam solutions available

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20091104/28a053c0/attachment.html