Mohammed Ejaz mejaz at cyberia.net.sa
Sun Mar 15 15:50:37 GMT 2015

Is there any way to overcome this problem. as I wanted to allow double
extension. It should be from the filename.rules file. 


This is the syntax is it?? 


# Deny all other double file extensions. This catches any hidden filenames.

allow   \.[a-z][a-z0-9]{2,3}\s*\.[a-z0-9]{3}$   Found possible filename
hiding                          Attempt to hide real filename extension




From: mailscanner-bounces at lists.mailscanner.info
[mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of Jeremy
Sent: Sunday, March 15, 2015 6:21 PM
To: MailScanner discussion
Subject: Re: unable-to-release-qurantine-message


The original e-mail attachment "EAWEMA150300207, ELSHERIF AHMED.RAMI.doc"


Your file has a double extension. 



Jeremy McSpadden | Flux Labs
Local - 850-250-5590x501 <tel:850-250-5590;501>  | Mobile - 850-890-2543 
Fax - 850-254-2955 | Toll Free - 877-699-FLUX
Web - http://www.fluxlabs.net <http://www.fluxlabs.net/> 


On Mar 15, 2015, at 9:49 AM, Mohammed Ejaz <mejaz at cyberia.net.sa> wrote:




I am trying to release the quarantine message with the below send mail
command, but still it get failed to release and shows the below error. Any
help would be highly appreciated. 



Thanks in advance




Below are my settings In MailScanner.conf 

Quarantine Whole Messages As Queue Files = no 

and in the quarantine directory you have a file called message (this is the
complete human-readible message, but without the envelope info). Just do




cd /path/to/quarantine/dir

sendmail -t -i < message






his is a message from the MailScanner E-Mail Virus Protection Service


The original e-mail attachment "EAWEMA150300207, ELSHERIF AHMED.RAMI.doc"

is on the list of unacceptable attachments for this site and has been

replaced by this warning message.


If you wish to receive a copy of the original attachment, please

e-mail helpdesk and include the whole of this message

in your request. Alternatively, you can call them, with

the contents of this message to hand when you call.


At Sun Mar 15 17:16:24 2015 the virus scanner said:

   MailScanner: Attempt to hide real filename extension (EAWEMA150300207,


Note to Help Desk: Look on the yoursite (nmersal.cyberia.net.sa) MailScanner
in /var/spool/MailScanner/quarantine/20150315 (message 1208F5DFF51.A76CD).



Your Organisation Name Here



For all your IT requirements visit: http://www.transtec.co.uk


MailScanner mailing list
mailscanner at lists.mailscanner.info

Before posting, read http://wiki.mailscanner.info/posting

Support MailScanner development - buy the book off the website! 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20150315/c88d29df/attachment.html 

More information about the MailScanner mailing list