MailScanner Digest, Vol 98, Issue 2

Wed Feb 5 00:59:30 GMT 2014

And personal'm starting to see this mailscanner with other eyes, always 
admired resources, but now I am faced with a problem that seems to be up 
purposeful.

Em 02-02-2014 10:00, mailscanner-request at lists.mailscanner.info escreveu:
> Send MailScanner mailing list submissions to
> 	mailscanner at lists.mailscanner.info
>
> To subscribe or unsubscribe via the World Wide Web, visit
> 	http://lists.mailscanner.info/mailman/listinfo/mailscanner
> or, via email, send a message with subject or body 'help' to
> 	mailscanner-request at lists.mailscanner.info
>
> You can reach the person managing the list at
> 	mailscanner-owner at lists.mailscanner.info
>
> When replying, please edit your Subject line so it is more specific
> than "Re: Contents of MailScanner digest..."
>
>
> Today's Topics:
>
>     1. Re: MailScanner Digest, Vol 98, Issue 1 (Tiago Eduardo Zacarias)
>     2. Re: MailScanner Digest, Vol 98, Issue 1 (Tiago Eduardo Zacarias)
>     3. Re: Filter-Files (Mark Sapiro)
>
>
> ----------------------------------------------------------------------
>
> Message: 1
> Date: Sat, 01 Feb 2014 11:39:22 -0200
> From: Tiago Eduardo Zacarias <tiago at tiagoti.com.br>
> Subject: Re: MailScanner Digest, Vol 98, Issue 1
> To: mailscanner at lists.mailscanner.info
> Message-ID: <52ECF90A.6060902 at tiagoti.com.br>
> Content-Type: text/plain; charset=ISO-8859-1; format=flowed
>
> Good morning Martin Hepworth
>
>
> Restarted the service mailscanner and yet the policy described in
> /etc/mailscanner/files- types.conf not and applied as observed in test
> with attachments and compressed files pure. Example executables files
> when attached in the policy even deny the mailscanner does not block,
> already put debug in order to see something but does not return
> anything, so that was checked informs entered the path of the program
> /usr/bin/file now and then forwards it to the clamav anti-virus.
>
> What may be you could give me a light, do not know if I can forward my
> list to facilitate mailscanner.conf.
>
> I thank you for your attention.
>
> Att
>
> Tiago Eduardo Zacarias
> LPIC-1
>
> Em 01-02-2014 10:00, mailscanner-request at lists.mailscanner.info escreveu:
>> Send MailScanner mailing list submissions to
>> 	mailscanner at lists.mailscanner.info
>>
>> To subscribe or unsubscribe via the World Wide Web, visit
>> 	http://lists.mailscanner.info/mailman/listinfo/mailscanner
>> or, via email, send a message with subject or body 'help' to
>> 	mailscanner-request at lists.mailscanner.info
>>
>> You can reach the person managing the list at
>> 	mailscanner-owner at lists.mailscanner.info
>>
>> When replying, please edit your Subject line so it is more specific
>> than "Re: Contents of MailScanner digest..."
>>
>>
>> Today's Topics:
>>
>>      1. Filter-Files (Tiago Eduardo Zacarias)
>>      2. Re: Filter-Files (Martin Hepworth)
>>
>>
>> ----------------------------------------------------------------------
>>
>> Message: 1
>> Date: Fri, 31 Jan 2014 13:09:53 -0200
>> From: Tiago Eduardo Zacarias <tiago at tiagoti.com.br>
>> Subject: Filter-Files
>> To: mailscanner at lists.mailscanner.info
>> Message-ID: <52EBBCC1.80600 at tiagoti.com.br>
>> Content-Type: text/plain; charset=ISO-8859-1; format=flowed
>>
>> Good Morning List MailScanner,
>>
>> I ha a few days trying to accomplish in the file filter mailscanner
>> unsuccessfully already realized reinstalling it with all dependencies,
>> and even by setting the parameters to allow and deny files to the files
>> filetypes but I can not perform the filter in mailscanner if I send out
>> direct aqruivo example executable type attached zipped or not the
>> mailscanner blocks, like a support to this problem.
>>
>>
>> Attached the file mailscanner.
>>
>>
>> Thank you.
>>
>> CPU = Pentium 4  3 Ghz
>> Postfix Version: 2.6.6-2.2
>> MailScanner Version:  4.84.6-1
>>
>>
>>
>> ------------------------------
>>
>> Message: 2
>> Date: Fri, 31 Jan 2014 16:15:14 +0000
>> From: Martin Hepworth <maxsec at gmail.com>
>> Subject: Re: Filter-Files
>> To: MailScanner discussion <mailscanner at lists.mailscanner.info>
>> Message-ID:
>> 	<CAGDKorLiogMp8QTGuHhbFcXaaotBVd4qh1LNHpgESU7nYvOMEg at mail.gmail.com>
>> Content-Type: text/plain; charset="iso-8859-1"
>>
>> What have you tried with the filetypes thats doesnt work and did you start
>> and stop MailScanner after the change?
>>
>
>
> ------------------------------
>
> Message: 2
> Date: Sat, 01 Feb 2014 11:49:36 -0200
> From: Tiago Eduardo Zacarias <tiago at tiagoti.com.br>
> Subject: Re: MailScanner Digest, Vol 98, Issue 1
> To: mailscanner at lists.mailscanner.info
> Message-ID: <52ECFB70.5040309 at tiagoti.com.br>
> Content-Type: text/plain; charset=UTF-8; format=flowed
>
> Good morning Martin Hepworth
>
>
> Restarted the service mailscanner and yet the policy described in / etc
> / mailscanner / files - not types.conf and applied as observed in test
> with attachments and compressed files pure . Example executables files
> when attached in the policy even deny the mailscanner does not block ,
> already put debug in order to see something but does not return anything
> , so that was checked informs entered the path of the program / ??usr /
> bin / file now and then forwards it to the clamav anti -virus .
>
> Example of policy
>
> Contet of /etc/mailscanner/files-types.conf :
>
> # To disable this feature , set this to just " Filetype Rules = " or
> September
> # The location of the file command to a blank string .
> Filetype Rules = % etc -dir % / filetype.rules.conf
>
> Content of / filetype.rules.conf :
>
> allow text -
> allow \ bscript -
> allow archive -
> allow postscript -
> deny self -extract No self-extracting archives Self-extracting archives
> The allowed
> deny executable No executables No programs allowed
> # EXAMPLE : deny - x - dosexec In DOS executables No DOS programs allowed
> deny ELF No executables No programs allowed
> rename Registry Windows Registry entries ( renamed ) Windows Registry
> files ( renamed )
>
> I thank you for your attention .
>
> Att
>
> Tiago Eduardo Zacarias
> LPIC-1
>
> Em 01-02-2014 10:00, mailscanner-request at lists.mailscanner.info escreveu:
>> Send MailScanner mailing list submissions to
>> 	mailscanner at lists.mailscanner.info
>>
>> To subscribe or unsubscribe via the World Wide Web, visit
>> 	http://lists.mailscanner.info/mailman/listinfo/mailscanner
>> or, via email, send a message with subject or body 'help' to
>> 	mailscanner-request at lists.mailscanner.info
>>
>> You can reach the person managing the list at
>> 	mailscanner-owner at lists.mailscanner.info
>>
>> When replying, please edit your Subject line so it is more specific
>> than "Re: Contents of MailScanner digest..."
>>
>>
>> Today's Topics:
>>
>>      1. Filter-Files (Tiago Eduardo Zacarias)
>>      2. Re: Filter-Files (Martin Hepworth)
>>
>>
>> ----------------------------------------------------------------------
>>
>> Message: 1
>> Date: Fri, 31 Jan 2014 13:09:53 -0200
>> From: Tiago Eduardo Zacarias <tiago at tiagoti.com.br>
>> Subject: Filter-Files
>> To: mailscanner at lists.mailscanner.info
>> Message-ID: <52EBBCC1.80600 at tiagoti.com.br>
>> Content-Type: text/plain; charset=ISO-8859-1; format=flowed
>>
>> Good Morning List MailScanner,
>>
>> I ha a few days trying to accomplish in the file filter mailscanner
>> unsuccessfully already realized reinstalling it with all dependencies,
>> and even by setting the parameters to allow and deny files to the files
>> filetypes but I can not perform the filter in mailscanner if I send out
>> direct aqruivo example executable type attached zipped or not the
>> mailscanner blocks, like a support to this problem.
>>
>>
>> Attached the file mailscanner.
>>
>>
>> Thank you.
>>
>> CPU = Pentium 4  3 Ghz
>> Postfix Version: 2.6.6-2.2
>> MailScanner Version:  4.84.6-1
>>
>>
>>
>> ------------------------------
>>
>> Message: 2
>> Date: Fri, 31 Jan 2014 16:15:14 +0000
>> From: Martin Hepworth <maxsec at gmail.com>
>> Subject: Re: Filter-Files
>> To: MailScanner discussion <mailscanner at lists.mailscanner.info>
>> Message-ID:
>> 	<CAGDKorLiogMp8QTGuHhbFcXaaotBVd4qh1LNHpgESU7nYvOMEg at mail.gmail.com>
>> Content-Type: text/plain; charset="iso-8859-1"
>>
>> What have you tried with the filetypes thats doesnt work and did you start
>> and stop MailScanner after the change?
>>
>
>
> ------------------------------
>
> Message: 3
> Date: Sat, 01 Feb 2014 18:59:16 -0800
> From: Mark Sapiro <mark at msapiro.net>
> Subject: Re: Filter-Files
> To: mailscanner at lists.mailscanner.info
> Message-ID: <52EDB484.7070809 at msapiro.net>
> Content-Type: text/plain; charset=UTF-8
>
> On 02/01/2014 05:49 AM, Tiago Eduardo Zacarias wrote:
>> Restarted the service mailscanner and yet the policy described in / etc
>> / mailscanner / files - not types.conf and applied as observed in test
>> with attachments and compressed files pure . Example executables files
>> when attached in the policy even deny the mailscanner does not block ,
>> already put debug in order to see something but does not return anything
>> , so that was checked informs entered the path of the program / ??usr /
>> bin / file now and then forwards it to the clamav anti -virus .
>
> It is very difficult for me to understand exactly what you are trying to
> say, but in your MailScanner.conf file do you have
>
> File Command = /usr/bin/file
>
> or some other path? what do you get when you invoke /usr/bin/file or
> whatever path it is on the 'executable' file that is not blocked by
> MailScanner?
>