FileType rules show executable even though file shows data -- Please help fix.

[Peter Ong]

Thanks Jules. Will do that, and I'll explain some more.

p

----- Original Message -----

> From: "Jules Field" <MailScanner at ecs.soton.ac.uk>
> To: "MailScanner discussion" <mailscanner at lists.mailscanner.info>
> Sent: Wednesday, July 7, 2010 1:37:08 AM
> Subject: Re: FileType rules show executable even though file shows data -- Please help fix.
> 
> Please can you zip up the original raw queue message file and mail it
> to 
> me off-list.
> 
> Jules.
> 
> On 06/07/2010 21:13, Peter Ong wrote:
> > Sorry guys...
> >
> > The DOS warning is correct -- from the file command. The problem is
> that isn't the line where the message fails in the
> filetype.conf.rules. It fails on
> > deny    executable      No executables          No executables
> allowed
> >
> > There are two lines that shows "No programs allowed", but I changed
> one to say "No executables allowed" so depending on the error message
> I know that it failed on one of them, and it does fail on the "No
> executables" line.
> >
> > I only ran file on the msg file because Julian suggested it, and for
> everyone's edification, I posted the result here. The fact that the
> file command shows DOS executable (COM) should trigger the correct
> line in the error message which is:
> >
> > deny    -       x-dosexec       No DOS executables      No DOS
> programs allowed
> >
> > But clearly based on my repeatable error messages, it fails not on
> this line, but "No exetables allowed". There is no attachment. It
> simply contains japanese characters.
> >
> > The documentation on the top of the file said that I can have an
> optional third field which I have filled out, but there doesn't seem
> to be a known established way of filling it out. Our operation is
> being severely affected by this, and I don't know what else to do.
> >
> > I could really use help here.
> >
> > p
> >
> >
> > ----- Original Message -----
> >
> >    
> >> From: "Denis Beauchemin"<Denis.Beauchemin at USherbrooke.ca>
> >> To: "MailScanner discussion"<mailscanner at lists.mailscanner.info>
> >> Sent: Tuesday, July 6, 2010 12:57:49 PM
> >> Subject: Re: FileType rules show executable even though file shows
> data -- Please help fix.
> >>
> >> Le 2010-07-06 15:14, Peter Ong a écrit :
> >>      
> >>> I hate to keep beating a dead horse, but would anyone else have
> any
> >>>        
> >> ideas? This problem is a serious interruption in our day to day
> >> communications.
> >>      
> >>> p
> >>>
> >>> ----- Original Message -----
> >>>
> >>>        
> >>>> From: "Peter Ong"<peter.ong at hypermediasystems.com>
> >>>> To: "MailScanner discussion"<mailscanner at lists.mailscanner.info>
> >>>> Sent: Tuesday, July 6, 2010 11:05:17 AM
> >>>> Subject: Re: FileType rules show executable even though file
> shows
> >>>>          
> >> data -- Please help fix.
> >>      
> >>>> I am thoroughly confused.
> >>>>
> >>>> ./20100706/64BCE572B7.A0F44/msg-16388-1.txt: DOS executable
> (COM)
> >>>>
> >>>> It is not getting caught on this line in the logs... it clearly
> >>>>          
> >> says
> >>      
> >>>> "No programs allowed".
> >>>>
> >>>> Is there documentation somewhere I'm neglecting to read?
> >>>>
> >>>> p
> >>>>          
> >> Peter,
> >>
> >> A "DOS executable" is a program. Thus the warning is telling the
> >> truth.
> >>
> >> Denis
> >>
> >> -- 
> >> Denis Beauchemin, analyste
> >> Université de Sherbrooke, S.T.I.
> >> T: 819.821.8000x62252 F: 819.821.8045
> >>
> >> -- 
> >> MailScanner mailing list
> >> mailscanner at lists.mailscanner.info
> >> http://lists.mailscanner.info/mailman/listinfo/mailscanner
> >>
> >> Before posting, read http://wiki.mailscanner.info/posting
> >>
> >> Support MailScanner development - buy the book off the website!
> >>      
> 
> Jules
> 
> -- 
> Julian Field MEng CITP CEng
> www.MailScanner.info
> Buy the MailScanner book at www.MailScanner.info/store
> 
> Need help customising MailScanner?
> Contact me!
> Need help fixing or optimising your systems?
> Contact me!
> Need help getting you started solving new requirements from your
> boss?
> Contact me!
> 
> PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
> Follow me at twitter.com/JulesFM
> 
> 
> -- 
> This message has been scanned for viruses and
> dangerous content by MailScanner, and is
> believed to be clean.
> 
> -- 
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
> 
> Before posting, read http://wiki.mailscanner.info/posting
> 
> Support MailScanner development - buy the book off the website!