docx problems

Brett Moss bamcomp at yahoo.com
Tue May 18 21:02:19 IST 2010




> The "No programs allowed" error
> occurs in filetype.rules.conf and
> archives.filetype.rules.conf, so that is where you need to
> allow them.
> Basically you're probably going to have to comment out the
> "No programs allowed" rule in archives.filetype.rules.conf.
> The other option is to use the MIME type reporting (the
> optional extra field in each line, read the docs at the top
> of the file), and find out what a "file -i" reports for one
> of those odttf files, and allow that instead. That way you
> can keep the "No programs allowed" line as well, just put
> your new "allow" line above it.
> 
> Hope that helps!
> 
> Jules.
> 

Hello Jules,
I must be doing something wrong.
The results of a file -i are

file -i font10.odttf
font10.odttf: application/octet-stream

So, I placed the following line in both the archives.filetype.rules.conf and filetype.rules.conf above the line
deny    executable      No executables          No programs allowed

allow   -       application/octet-stream        -       -

All spaces are tabs.  I restarted MailScanner and the message is still blocked.

>From what I saw in the archives, the format looks correct, but obviously it is not.  Any suggestions please?

Thank you,
Brett

> On 17/05/2010 17:30, Brett Moss wrote:
> > Hello,
> > This appears to be a new problem for me.
> > I am seeing emails with .docx files attached tagged as
> a bad filename with this message.
> > 
> > Quarantine:
> /var/spool/MailScanner/quarantine/20100517/o4HG7hpC008615
> >      Report: MailScanner: No programs
> allowed (font10.odttf)
> >      Report: MailScanner: No programs
> allowed (font10.odttf)
> > 
> > I tried to add a line to the
> archives.filename.rules.conf to allow the .odttf, but that
> did not seem to work.
> > 
> > I did not find anything with google for "mailscanner
> and odttf", but I can't imagine this is new.
> > 
> > The .odttf files live a few dirs down
> > file.docx-->word-->fonts-->fontx.odttf
> > 
> > Thank you,
> > Brett
> > 
> > 
> > 
> >    
> 
> Jules
> 
> -- Julian Field MEng CITP CEng
> www.MailScanner.info
> Buy the MailScanner book at www.MailScanner.info/store
> 
> Need help customising MailScanner?
> Contact me!
> Need help fixing or optimising your systems?
> Contact me!
> Need help getting you started solving new requirements from
> your boss?
> Contact me!
> 
> PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415
> B654
> Follow me at twitter.com/JulesFM and
> twitter.com/MailScanner
> 
> 
> -- This message has been scanned for viruses and
> dangerous content by MailScanner, and is
> believed to be clean.
> 
> -- MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
> 
> Before posting, read http://wiki.mailscanner.info/posting
> 
> Support MailScanner development - buy the book off the
> website! 


      


More information about the MailScanner mailing list