File name rules not working?

[Jerry Benton]

Shawn,

Thanks for testing. Did you do it with file name rules as well? Pointing to a file.

--
Jerry Benton
www.mailborder.com
- via mobile
________________________________
From: MailScanner <mailscanner-bounces+jerry.benton=mailborder.com at lists.mailscanner.info> on behalf of Shawn Iverson <iversons at rushville.k12.in.us>
Sent: Thursday, May 10, 2018 7:14:30 PM
To: MailScanner Discussion
Subject: Re: File name rules not working?

Jerry,

Regression tested 5.0.7-1 to 5.0.7-3.  I am unable to reproduce the issue...

May 10 19:11:32 smtp MailScanner[11406]: New Batch: Scanning 1 messages, 6331596 bytes
May 10 19:11:33 smtp MailScanner[11406]: Filename Checks:  (2A9DE60AFD9A.A959A SP63000.exe)
May 10 19:11:33 smtp MailScanner[11406]: Other Checks: Found 1 problems
May 10 19:11:33 smtp MailScanner[11406]: Virus and Content Scanning: Starting
May 10 19:11:33 smtp MailScanner[11406]: Saved entire message to /var/spool/MailScanner/quarantine/20180510/2A9DE60AFD9A.A959A
May 10 19:11:34 smtp MailScanner[11406]: Saved infected "SP63000.exe" to /var/spool/MailScanner/quarantine/20180510/2A9DE60AFD9A.A959A

/etc/MailScanner/filename.rules
FromOrTo:       example.org<http://example.org>  /etc/MailScanner/test.rule.conf

/etc/MailScanner/test.rule.conf
deny    \.exe$  -       -


On Thu, May 10, 2018 at 4:00 PM, Shawn Iverson <iversons at rushville.k12.in.us<mailto:iversons at rushville.k12.in.us>> wrote:
I'm beginning regression testing on this issue.

I'll keep you posted.

On Thu, May 10, 2018 at 12:32 PM, Jerry Benton <jerry.benton at mailborder.com<mailto:jerry.benton at mailborder.com>> wrote:
With the latest build of MailScanner, filename rules seem to no longer work
as intended.

filename.rules:

FromOrTo:       domain1.net<http://domain1.net>  /etc/MailScanner/frules/domain1.net.fn.conf
FromOrTo:       domain2.es<http://domain2.es>        /etc/MailScanner/frules/domain2.es.fn.conf
FromOrTo:       adomain3.eu<http://adomain3.eu>       /etc/MailScanner/frules/domain3.eu.fn.conf


Each file contains the filename rules. here is the .exe rule:

deny    \.exe$   -       -

And it allows .exe files to pass. Before you ask, yes, tabs are used. This
is on a Mailborder server and they have been building these rules for years.


Any ideas?



--
Jerry Benton
www.mailborder.com<http://www.mailborder.com>
+1   (843) 800-8605
+44 (020) 3883-8605





--
MailScanner mailing list
mailscanner at lists.mailscanner.info<mailto:mailscanner at lists.mailscanner.info>
http://lists.mailscanner.info/mailman/listinfo/mailscanner





--
Shawn Iverson, CETL
Director of Technology
Rush County Schools
765-932-3901 x1171
iversons at rushville.k12.in.us<mailto:iversons at rushville.k12.in.us>

[https://docs.google.com/uc?export=download&id=0Bw5iD0ToYvs_cy1OZFNIZ0drYVU&revid=0Bw5iD0ToYvs_UitIcHVIWkJVVTl2VGpxVUE0d0FQcHBIRXk4PQ][https://docs.google.com/uc?export=download&id=0Bw5iD0ToYvs_Zkh4eEs3R01yWXc&revid=0Bw5iD0ToYvs_QWpBK2Y2ajJtYjhOMDRFekZwK2xOamk5Q3Y0PQ]
[https://docs.google.com/uc?export=download&id=1aBrlQou4gjB04FY-twHN_0Dn3GHVNxqa&revid=0Bw5iD0ToYvs_RnQ0eDhHcm95WHBFdkNRbXhQRXpoYkR6SEEwPQ]



--
Shawn Iverson, CETL
Director of Technology
Rush County Schools
765-932-3901 x1171
iversons at rushville.k12.in.us<mailto:iversons at rushville.k12.in.us>

[https://docs.google.com/uc?export=download&id=0Bw5iD0ToYvs_cy1OZFNIZ0drYVU&revid=0Bw5iD0ToYvs_UitIcHVIWkJVVTl2VGpxVUE0d0FQcHBIRXk4PQ][https://docs.google.com/uc?export=download&id=0Bw5iD0ToYvs_Zkh4eEs3R01yWXc&revid=0Bw5iD0ToYvs_QWpBK2Y2ajJtYjhOMDRFekZwK2xOamk5Q3Y0PQ]
[https://docs.google.com/uc?export=download&id=1aBrlQou4gjB04FY-twHN_0Dn3GHVNxqa&revid=0Bw5iD0ToYvs_RnQ0eDhHcm95WHBFdkNRbXhQRXpoYkR6SEEwPQ]
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20180510/3105c149/attachment.html>