Bypass filtetype or filename blocking and quarantine
George Papamichelakis
gpapamichelakis at gmail.com
Fri Nov 30 18:23:52 UTC 2018
Thanks for suggesting
On Fri, Nov 30, 2018, 6:48 PM Mark Sapiro <mark at msapiro.net wrote:
> On 11/30/18 5:41 AM, George Papamichelakis wrote:
> >
> > I'm trying to bypass filename checking using the examples mentioned in
> > the book
> > in Appendix C .
>
> Which is quite old.
>
You mean I shouldn't take very seriously the book ?
> > In particular I have created the three mentioned files
> > (filename.rules.allowall.conf,
> > filetype.rules.allowall.conf and filename.rules).
>
>
> What about filetype.rules?
>
Currently I only need filename rules to bypass. I just created the file
type in advance.
> And did you create these in the appropriate (/etc/MailScanner/ and
> /etc/MailScanner/rules/) directories, not literally %etc-dir% and %rules%?
>
Yes of course
>
> > The only different
> > thing I have done
> > different is that I specify a complete mail address instead of the
> > domain eg:
> >
> > FromOrTo: user at email.tld %etc-dir%/filename.rules.allowall.conf
>
>
> I think you may need /etc/MailScanner/filename.rules.allowall.conf
> instead of %etc-dir%/filename.rules.allowall.conf.
>
> And did you make the appropriate Filename Rules and FileType Rules
> settings in MailScanner.conf or better in a file in
> /etc/MailScanner/conf.d/?
>
>
>
>
Yes I did
> > (I don't want the whole domain to go unchecked, only some users) . But
> > the rule don't seem to work
> > Is this the expected behavior ? If not can I somehow trace why the rule
> > doesn't apply ?
>
>
> First make sure everything is as indicated above. Then if there are
> still problems, post the the actual file path names and their contents
> (you can obfuscate actual email addresses) and your config settings for
> Filename Rules and FileType Rules.
>
>
>
>
>
Ok I will do so first
> > Also can I specify in the rule that I want to bypass the filename (or
> > type) checks when the user is the sender but not when the user is the
> > recipient ?
>
>
> Instead of FromOrTo, just use From.
>
This applies to To also ?
> See the files README and EXAMPLES in /etc/MailScanner/rules.
>
> --
> Mark Sapiro <mark at msapiro.net> The highway is for gamblers,
> San Francisco Bay Area, California better use your sense - B. Dylan
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20181130/fbf59f0f/attachment.html>
More information about the MailScanner
mailing list