Blocking emails with dangerous attachments

Martin Hepworth maxsec at gmail.com
Tue Apr 5 14:08:59 IST 2011


check you're scanning inside zip archives - these are coming in as zip not
.exe

-- 
Martin Hepworth
Oxford, UK


On 5 April 2011 10:45, Richard Coombe <richard.coombe at taffhousing.co.uk>wrote:

> Hi,
>
> We're blocking all incoming exe attachments. However we're getting some
> spam/virus email with exe attachments, ("Your DHL / UPS package is ready"
> type stuff). The exe gets removed and then the rest of the message is
> delivered with an attachment warning report. This is annoying my end users
> as they're not interested in the email in any way.
>
> Is there a config setting to quarantine emails that have had their
> attachments stripped?
>
> I can only find 'Deliver Cleaned Messages' in MailScanner.conf. However I
> also have emails from other legitimate mailing lists that have URLs in them
> which get 'disarmed' and I _do_ want to deliver these message. So I don't
> think I can change this to 'no', I think I need a more fine grained
> approach.
>
> Am using Mailscanner with spamassassin and clamav.
>
> Cheers,
> Richard
> IT Manager, Taff Housing Association
>
>
>
>
>
>
>
> This message is private and confidential. If you have received this message
> in error, please notify us and remove it from your system.
> Please consider the environment before printing this email.
>
> Any views or other information in this message which do not relate to our
> business are not authorised by us, nor does this message form part of any
> contract unless so stated.
>
> Taff Housing Association - www.taffhousing.co.uk - A Charitable Housing
> Association registered under the Industrial and Provident Societies Acts
> 1965 No. 21408R. Registered by The National Assembly for Wales No. L009.
> Registered address: Alexandra House, 307-315 Cowbridge Road East, Cardiff
> CF5 1JD. VAT Registration Number: 869 8405 65.
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
> Before posting, read http://wiki.mailscanner.info/posting
>
> Support MailScanner development - buy the book off the website!
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20110405/f94ba0f4/attachment.html


More information about the MailScanner mailing list