MailScanner 4.84.3-1 can't deny any file.

[吳汝剛]

It's my filename.rules.conf
deny    \.cur$                  Windows cursor file security
vulnerability                                      Possible buffer overflow
in Windows
deny    \.reg$          Possible Windows registry
attack                                                Windows registry
entries are very dangerous in email
It's default settings.
I haven't change any setup.

2011/11/2 Jeremy McSpadden <jeremy at fluxlabs.net>

> deny \.reg$   Windows registry attack
> deny \.cur$ Cursor File
>
> in filename.rules.conf
> --
> Jeremy McSpadden****
> Flux Labs, Inc****
> http://www.fluxlabs.net
> Endless Solutions****
> *Office* : 850-588-4626****
> *Cell* : 850-890-2543
> *Fax* : 850-254-2955
>
> On Nov 1, 2011, at 10:04 PM, §d¦¼­è wrote:
>
> It's my setup.
> # Do you want to scan the messages for potentially dangerous content?
> # Setting this to "no" will disable all the content-based checks except
> # Virus Scanning, Allow Partial Messages and Allow External Message Bodies.
> # This can also be the filename of a ruleset.
> Dangerous Content Scanning = yes
>
> I have set it to yes
>
> 2011/11/2 Jeremy McSpadden <jeremy at fluxlabs.net>
>
>> Can you verify Dangerous Content Scanning is set to yes ?
>>
>>  --****
>> Jeremy McSpadden****
>> Flux Labs, Inc****
>> http://www.fluxlabs.net
>> Endless Solutions****
>> *Office* : 850-588-4626****
>> *Cell* : 850-890-2543
>> *Fax* : 850-254-2955
>>
>> On Nov 1, 2011, at 9:43 PM, §d¦¼­è wrote:
>>
>> Hello,
>> I test MailScanner 4.84.3-1 on Fedora 13 and Fedora 14.
>> It's can't deny any attachment at filetname.rules.conf list.
>> Example:
>> The default set deny .cur and .reg attachment.
>> But when I send mail with .cur or .reg attachment.
>> It's always can received this mail.
>> And I check maillog.
>> It's no show any error message.
>> Please check it.
>> I list fedora 13 and 14 some information.
>>
>> [root at tw14 MailScanner]# MailScanner -v
>> Running on
>> Linux tw14.linguitronics.com 2.6.35.13-91.fc14.i686 #1 SMP Tue May 3
>> 13:36:36 UTC 2011 i686 i686 i386 GNU/Linux
>> This is Fedora release 14 (Laughlin)
>> This is Perl version 5.012003 (5.12.3)
>>
>> This is MailScanner version 4.84.3
>>
>> [root at tw ~]# MailScanner -v
>> Running on
>> Linux tw.linguitronics.com 2.6.34.9-69.fc13.i686 #1 SMP Tue May 3
>> 09:20:30 UTC 2011 i686 i686 i386 GNU/Linux
>> This is Fedora release 13 (Goddard)
>> This is Perl version 5.010001 (5.10.1)
>>
>> This is MailScanner version 4.84.3
>>
>> --
>> MailScanner mailing list
>> mailscanner at lists.mailscanner.info
>> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>>
>> Before posting, read http://wiki.mailscanner.info/posting
>>
>> Support MailScanner development - buy the book off the website!
>>
>>
>>
>> --
>> MailScanner mailing list
>> mailscanner at lists.mailscanner.info
>> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>>
>> Before posting, read http://wiki.mailscanner.info/posting
>>
>> Support MailScanner development - buy the book off the website!
>>
>>
>
>
> --
> §d¦¼­è
> ­Ó¤Hºô­¶ http://pc.aspa.idv.tw
> ­Ó¤HBlog http://ak6783.blogspot.com/
> Twitter http://twitter.com/akong77
> Plurk http://www.plurk.com/akong77
> Facebook http://www.facebook.com/akong77
> Email (1) : akong at aspa.idv.tw
> Email (2) : ak6783 at gmail.com
> ¤â¾÷ : 0960599655
> WebRep
> Overall rating
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
> Before posting, read http://wiki.mailscanner.info/posting
>
> Support MailScanner development - buy the book off the website!
>
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
> Before posting, read http://wiki.mailscanner.info/posting
>
> Support MailScanner development - buy the book off the website!
>
>


-- 
§d¦¼­è
­Ó¤Hºô­¶ http://pc.aspa.idv.tw
­Ó¤HBlog http://ak6783.blogspot.com/
Twitter http://twitter.com/akong77
Plurk http://www.plurk.com/akong77
Facebook http://www.facebook.com/akong77
Email (1) : akong at aspa.idv.tw
Email (2) : ak6783 at gmail.com
¤â¾÷ : 0960599655
WebRep
Overall rating
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20111102/e706934f/attachment-0001.html