wrong detection of file?

[Shawn Iverson]

Although I agree with you, a file with .com in the middle of it, however,
should not match.  I suspect the filename parser in MailScanner is not
parsing the filename properly and is perhaps treating spaced elements of
the filename as separate strings.

On Tue, May 28, 2019 at 11:38 AM Peter Farrow <peter.farrow at togethia.net>
wrote:

> Dear Louis,
>
> A file ending in ".com" is a computer code executable program.
>
> Mailscanner is seeing "example.com" and disallowing it as a potential
> executable.
>
> This is normal expected and by design behaviour,
>
> Pete
>
> On 28/05/2019 15:43, L.P.H. van Belle via MailScanner wrote:
>
> Hai Shawn,
>
>
> Have you ever seen something like this.
>
> I just e-mailed a file, with a name as shown below.
> SSL Server Test hostname.example.com (Powered by Qualys SSL Labs).pdf
>
> The resport shows :
> Message: Executable DOS/Windows programs are dangerous in email (SSL Server Tes.com)
> And its shown in mailwatch as :  application/pdf; charset=binary
>
> Now the thing i dont get here is, how is the name "SSL Server Tes.com" constructed from
> The name : SSL Server Test hostname.example.com (Powered by Qualys SSL Labs).pdf
>
> I only change the hostname and domain here, i kept the format exact the same.
>
> Greetz,
>
> Louis
>
>
>
>
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
>

-- 
Shawn Iverson, CETL
Director of Technology
Rush County Schools
765-932-3901 option 7
iversons at rushville.k12.in.us

[image: Cybersecurity]
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20190528/8f6378b7/attachment-0001.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.JPG
Type: image/jpeg
Size: 25851 bytes
Desc: not available
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20190528/8f6378b7/attachment-0001.jpe>