unable-to-release-qurantine-message

[Mohammed Ejaz]

Is there any way to overcome this problem. as I wanted to allow double
extension. It should be from the filename.rules file. 

 

This is the syntax is it?? 

 

# Deny all other double file extensions. This catches any hidden filenames.

allow   \.[a-z][a-z0-9]{2,3}\s*\.[a-z0-9]{3}$   Found possible filename
hiding                          Attempt to hide real filename extension

 

Ejaz 

 

From: mailscanner-bounces at lists.mailscanner.info
[mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of Jeremy
McSpadden
Sent: Sunday, March 15, 2015 6:21 PM
To: MailScanner discussion
Subject: Re: unable-to-release-qurantine-message

 

The original e-mail attachment "EAWEMA150300207, ELSHERIF AHMED.RAMI.doc"

 

Your file has a double extension. 

 

.rami.doc

--
Jeremy McSpadden | Flux Labs
Local - 850-250-5590x501 <tel:850-250-5590;501>  | Mobile - 850-890-2543 
Fax - 850-254-2955 | Toll Free - 877-699-FLUX
Web - http://www.fluxlabs.net <http://www.fluxlabs.net/> 

 


On Mar 15, 2015, at 9:49 AM, Mohammed Ejaz <mejaz at cyberia.net.sa> wrote:

 

Hill 

 

I am trying to release the quarantine message with the below send mail
command, but still it get failed to release and shows the below error. Any
help would be highly appreciated. 

 

 

Thanks in advance

 

 

 

Below are my settings In MailScanner.conf 

Quarantine Whole Messages As Queue Files = no 

and in the quarantine directory you have a file called message (this is the
complete human-readible message, but without the envelope info). Just do

 

Command

 

cd /path/to/quarantine/dir

sendmail -t -i < message

 

 

Error

 

============================================================================
================

his is a message from the MailScanner E-Mail Virus Protection Service

----------------------------------------------------------------------

The original e-mail attachment "EAWEMA150300207, ELSHERIF AHMED.RAMI.doc"

is on the list of unacceptable attachments for this site and has been

replaced by this warning message.

 

If you wish to receive a copy of the original attachment, please

e-mail helpdesk and include the whole of this message

in your request. Alternatively, you can call them, with

the contents of this message to hand when you call.

 

At Sun Mar 15 17:16:24 2015 the virus scanner said:

   MailScanner: Attempt to hide real filename extension (EAWEMA150300207,
ELSHERIF AHMED.RAMI.doc)

 

Note to Help Desk: Look on the yoursite (nmersal.cyberia.net.sa) MailScanner
in /var/spool/MailScanner/quarantine/20150315 (message 1208F5DFF51.A76CD).

-- 

Postmaster

Your Organisation Name Here

www.your-organisation.com

 

For all your IT requirements visit: http://www.transtec.co.uk

============================================================================
======================================

-- 
MailScanner mailing list
mailscanner at lists.mailscanner.info
http://lists.mailscanner.info/mailman/listinfo/mailscanner

Before posting, read http://wiki.mailscanner.info/posting

Support MailScanner development - buy the book off the website! 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20150315/c88d29df/attachment.html