File name rules not working?

Fri May 11 01:19:08 UTC 2018

Thanks again Shawn. I appreciate you checking. This means it is probably a 
configuration error on my part.

--

Jerry Benton

 <http://www.mailborder.com/> www.mailborder.com
+1   (843) 800-8605

+44 (020) 3883-8605

From: MailScanner 
<mailscanner-bounces+jerry.benton=mailborder.com at lists.mailscanner.info> On 
Behalf Of Shawn Iverson
Sent: Thursday, May 10, 2018 19:20
To: MailScanner Discussion <mailscanner at lists.mailscanner.info>
Subject: Re: File name rules not working?

Yes, and I excluded the filetype rules, just to be sure.

On Thu, May 10, 2018 at 7:16 PM, Jerry Benton <jerry.benton at mailborder.com 
<mailto:jerry.benton at mailborder.com> > wrote:

Shawn,

Thanks for testing. Did you do it with file name rules as well? Pointing to a 
file.

--

Jerry Benton

www.mailborder.com <http://www.mailborder.com>

- via mobile

  _____

From: MailScanner 
<mailscanner-bounces+jerry.benton=mailborder.com at lists.mailscanner.info 
<mailto:mailborder.com at lists.mailscanner.info> > on behalf of Shawn Iverson 
<iversons at rushville.k12.in.us <mailto:iversons at rushville.k12.in.us> >
Sent: Thursday, May 10, 2018 7:14:30 PM
To: MailScanner Discussion
Subject: Re: File name rules not working?

Jerry,

Regression tested 5.0.7-1 to 5.0.7-3.  I am unable to reproduce the issue...

May 10 19:11:32 smtp MailScanner[11406]: New Batch: Scanning 1 messages, 
6331596 bytes

May 10 19:11:33 smtp MailScanner[11406]: Filename Checks:  (2A9DE60AFD9A.A959A 
SP63000.exe)

May 10 19:11:33 smtp MailScanner[11406]: Other Checks: Found 1 problems

May 10 19:11:33 smtp MailScanner[11406]: Virus and Content Scanning: Starting

May 10 19:11:33 smtp MailScanner[11406]: Saved entire message to 
/var/spool/MailScanner/quarantine/20180510/2A9DE60AFD9A.A959A

May 10 19:11:34 smtp MailScanner[11406]: Saved infected "SP63000.exe" to 
/var/spool/MailScanner/quarantine/20180510/2A9DE60AFD9A.A959A

/etc/MailScanner/filename.rules

FromOrTo:       example.org <http://example.org> 
/etc/MailScanner/test.rule.conf

/etc/MailScanner/test.rule.conf

deny    \.exe$  -       -

On Thu, May 10, 2018 at 4:00 PM, Shawn Iverson <iversons at rushville.k12.in.us 
<mailto:iversons at rushville.k12.in.us> > wrote:

I'm beginning regression testing on this issue.

I'll keep you posted.

On Thu, May 10, 2018 at 12:32 PM, Jerry Benton <jerry.benton at mailborder.com 
<mailto:jerry.benton at mailborder.com> > wrote:

With the latest build of MailScanner, filename rules seem to no longer work
as intended.

filename.rules:

FromOrTo:       domain1.net <http://domain1.net> 
/etc/MailScanner/frules/domain1.net.fn.conf
FromOrTo:       domain2.es <http://domain2.es> 
/etc/MailScanner/frules/domain2.es.fn.conf
FromOrTo:       adomain3.eu <http://adomain3.eu> 
/etc/MailScanner/frules/domain3.eu.fn.conf

Each file contains the filename rules. here is the .exe rule:

deny    \.exe$   -       -

And it allows .exe files to pass. Before you ask, yes, tabs are used. This
is on a Mailborder server and they have been building these rules for years.

Any ideas?

--
Jerry Benton
www.mailborder.com <http://www.mailborder.com>
+1   (843) 800-8605
+44 (020) 3883-8605

-- 
MailScanner mailing list
mailscanner at lists.mailscanner.info <mailto:mailscanner at lists.mailscanner.info>
http://lists.mailscanner.info/mailman/listinfo/mailscanner

-- 

Shawn Iverson, CETL

Director of Technology

Rush County Schools

765-932-3901 x1171

iversons at rushville.k12.in.us <mailto:iversons at rushville.k12.in.us>

  <https://docs.google.com/uc?export=download&id=0Bw5iD0ToYvs_cy1OZFNIZ0drYVU&revid=0Bw5iD0ToYvs_UitIcHVIWkJVVTl2VGpxVUE0d0FQcHBIRXk4PQ> 
<https://docs.google.com/uc?export=download&id=0Bw5iD0ToYvs_Zkh4eEs3R01yWXc&revid=0Bw5iD0ToYvs_QWpBK2Y2ajJtYjhOMDRFekZwK2xOamk5Q3Y0PQ>

  <https://docs.google.com/uc?export=download&id=1aBrlQou4gjB04FY-twHN_0Dn3GHVNxqa&revid=0Bw5iD0ToYvs_RnQ0eDhHcm95WHBFdkNRbXhQRXpoYkR6SEEwPQ>

-- 

Shawn Iverson, CETL

Director of Technology

Rush County Schools

765-932-3901 x1171

iversons at rushville.k12.in.us <mailto:iversons at rushville.k12.in.us>

  <https://docs.google.com/uc?export=download&id=0Bw5iD0ToYvs_cy1OZFNIZ0drYVU&revid=0Bw5iD0ToYvs_UitIcHVIWkJVVTl2VGpxVUE0d0FQcHBIRXk4PQ> 
<https://docs.google.com/uc?export=download&id=0Bw5iD0ToYvs_Zkh4eEs3R01yWXc&revid=0Bw5iD0ToYvs_QWpBK2Y2ajJtYjhOMDRFekZwK2xOamk5Q3Y0PQ>

  <https://docs.google.com/uc?export=download&id=1aBrlQou4gjB04FY-twHN_0Dn3GHVNxqa&revid=0Bw5iD0ToYvs_RnQ0eDhHcm95WHBFdkNRbXhQRXpoYkR6SEEwPQ>

-- 
MailScanner mailing list
mailscanner at lists.mailscanner.info <mailto:mailscanner at lists.mailscanner.info>
http://lists.mailscanner.info/mailman/listinfo/mailscanner

-- 

Shawn Iverson, CETL

Director of Technology

Rush County Schools

765-932-3901 x1171

iversons at rushville.k12.in.us <mailto:iversons at rushville.k12.in.us>

  <https://docs.google.com/uc?export=download&id=0Bw5iD0ToYvs_cy1OZFNIZ0drYVU&revid=0Bw5iD0ToYvs_UitIcHVIWkJVVTl2VGpxVUE0d0FQcHBIRXk4PQ> 
<https://docs.google.com/uc?export=download&id=0Bw5iD0ToYvs_Zkh4eEs3R01yWXc&revid=0Bw5iD0ToYvs_QWpBK2Y2ajJtYjhOMDRFekZwK2xOamk5Q3Y0PQ>

  <https://docs.google.com/uc?export=download&id=1aBrlQou4gjB04FY-twHN_0Dn3GHVNxqa&revid=0Bw5iD0ToYvs_RnQ0eDhHcm95WHBFdkNRbXhQRXpoYkR6SEEwPQ>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20180510/002c17c0/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 5530 bytes
Desc: not available
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20180510/002c17c0/attachment.bin>