Outlook .dat files detected as DOS executable by Linux file binary

Tracy Greggs mailscanner-list at okla.com
Mon Dec 23 18:15:39 UTC 2019


Interestingly enough, with the mime-type directive it comes back as text/plain where without it comes back as an executable block device driver.

 

So the filesystems test must be where the issue resides?

 

Thanks,

Tracy

 

 

 

From: MailScanner [mailto:mailscanner-bounces+mailscanner-list=okla.com at lists.mailscanner.info] On Behalf Of Valentin Laskov
Sent: Monday, December 23, 2019 7:58 AM
To: mailscanner at lists.mailscanner.info >> MailScanner discussion <mailscanner at lists.mailscanner.info>
Subject: Re: Outlook .dat files detected as DOS executable by Linux file binary

 

Try

/usr/bin/file --mime-type 240000.dat

If you like the result, you can make

File Command = /usr/local/bin/file-wrapper

#cat /usr/local/bin/file-wrapper

#!/bin/bash
#
#
/usr/bin/file --mime-type "$1"

Cheers! :)

 

На 23.12.2019 в 15:23, Tracy Greggs via MailScanner написа:

Both Centos 7 and Ubuntu 18.04 LTS file commands return for example 240000.dat: DOS executable (block device driver) on all Outlook received emails with attachments.  The .dat file names differ with each email, I never see winmail.dat but what I do see is that whatever the .dat file is normally contains the attachment and the message. 

 

I hate to completely disable the feature:

 

# Where the "file" command is installed.

# This is used for checking the content type of files, regardless of their

# filename.

# To disable Filetype checking, set this value to blank.              

File Command = /usr/bin/file

 

What is the current workaround for this issue, and what do you recommend for TNEF settings in MailScanner.conf?

 

Thanks and Happy Holidays everyone!

Tracy Greggs

 






 
 





-- 
Поздрави!
 
Валентин Ласков
Системен администратор
"Феста Холдинг" АД
бул. "Вл. Варненчик" 48
9000 гр. Варна
тел.:   +359 52 669137
GSM: +359 888 669137
Fax:   +359 52 669110
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20191223/29e9de3d/attachment.html>


More information about the MailScanner mailing list