Bypass filtetype or filename blocking and quarantine

George Papamichelakis gpapamichelakis at gmail.com
Fri Nov 30 18:23:52 UTC 2018


Thanks for suggesting

On Fri, Nov 30, 2018, 6:48 PM Mark Sapiro <mark at msapiro.net wrote:

> On 11/30/18 5:41 AM, George Papamichelakis wrote:
> >
> > I'm trying to bypass filename checking  using the examples mentioned in
> > the book
> > in Appendix C  .
>
> Which is quite old.
>

You mean I shouldn't take very seriously the book ?


> > In particular I have created the three mentioned files
> > (filename.rules.allowall.conf,
> > filetype.rules.allowall.conf and filename.rules).
>
>
> What about filetype.rules?
>

Currently I only need filename rules to bypass. I just created the file
type in advance.


> And did you create these in the appropriate (/etc/MailScanner/ and
> /etc/MailScanner/rules/) directories, not literally %etc-dir% and %rules%?
>

Yes of course


>
> > The only different
> > thing I have done
> > different is that I specify a complete mail address instead of the
> > domain eg:
> >
> > FromOrTo:  user at email.tld %etc-dir%/filename.rules.allowall.conf
>
>
> I think you may need /etc/MailScanner/filename.rules.allowall.conf
> instead of %etc-dir%/filename.rules.allowall.conf.
>
> And did you make the appropriate Filename Rules and FileType Rules
> settings in MailScanner.conf or better in a file in
> /etc/MailScanner/conf.d/?
>
>
>
>
Yes  I did


> > (I don't want the whole domain to go unchecked, only some users) . But
> > the rule don't seem to work
> > Is this the expected behavior ? If not can I somehow trace why the rule
> > doesn't apply ?
>
>
> First make sure everything is as indicated above. Then if there are
> still problems, post the the actual file path names and their contents
> (you can obfuscate actual email addresses) and your config settings for
> Filename Rules and FileType Rules.
>
>
>
>
>
Ok  I will do so first


> > Also can I specify in the rule  that I want to bypass the filename (or
> > type) checks when the user is the sender but not when the user is the
> > recipient ?
>
>
> Instead of FromOrTo, just use From.
>

This applies to To also ?


> See the files README and EXAMPLES in /etc/MailScanner/rules.
>
> --
> Mark Sapiro <mark at msapiro.net>        The highway is for gamblers,
> San Francisco Bay Area, California    better use your sense - B. Dylan
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20181130/fbf59f0f/attachment.html>


More information about the MailScanner mailing list