Encrypted attachment blocks, but not for 7z.

[L.P.H. van Belle]

Hai Shawn, 
 
The debian supplied version is used: 
 
ii  p7zip                                 16.02+dfsg-3+deb9u1            amd64        7zr file archiver with high compression ratio
ii  p7zip-full                            16.02+dfsg-3+deb9u1            amd64        7z and 7za file archivers with high compression ratio

I just checked the versions, Debian buster still has the same version, only with a few fixes in the build. 
 
i have : 
MailScanner.conf:Un7zip Command = /usr/bin/7z
 Usage: 7z <command> [<switches>...] <archive_name> [<file_names>...]
 
So thats ok. 
I have an exeption list for these files also  : rules/mailwatch.encrypted.rules 
But the sender domain/ip is not in my white list. 
 
Greetz, 
 
Louis
 
 
 

Van: Shawn Iverson [mailto:iversons at rushville.k12.in.us] 
Verzonden: donderdag 16 mei 2019 16:23
Aan: MailScanner Discussion
CC: L.P.H. van Belle
Onderwerp: Re: Encrypted attachment blocks, but not for 7z.



What version of 7z are you running?

On Thu, May 16, 2019, 9:47 AM L.P.H. van Belle via MailScanner <mailscanner at lists.mailscanner.info> wrote:

Hai, 

Anyone any tip how to findout why an encrypted 7z file made it through mailscanner. 
By default im blocking encrypted attachments, it works fine with zip's or rar files only 7z not. 

Any suggestions? I cant find anything here why this happend. 

Im running : 
Debian GNU/Linux 9.9 (stretch) 
mailscanner 5.1.3-2


Greetz, 

Louis



-- 
MailScanner mailing list
mailscanner at lists.mailscanner.info
http://lists.mailscanner.info/mailman/listinfo/mailscanner


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20190516/ef5bef01/attachment.html>