From zephyr at flytonet.com Mon May 4 08:20:00 2020 From: zephyr at flytonet.com (=?utf-8?B?5b6u5ZKM55qE6aKo?=) Date: Mon, 4 May 2020 16:20:00 +0800 Subject: Could I qurantine the message if attachment tests do not pass Message-ID: <005d01d621ec$cf205750$6d6105f0$@flytonet.com> Hi, I had set a rule for blocking some filenames. After the test of attachment, the attachments which are not allowed had been removed, but the email had still been delivered to user with no attachments. If I don?t want the user to receive the message before the administrator has checked, could I qurantine the message if attachment tests of Mailscanner do not pass ? Some settings of MailScanner.conf ================================== Filename Rules = %etc-dir%/filescan.rules Quarantine Whole Message = yes Quarantine Infections = yes =================================== Thanks in advance. zephyr -------------- next part -------------- An HTML attachment was scrubbed... URL: -------------- next part -------------- A non-text attachment was scrubbed... Name: smime.p7s Type: application/pkcs7-signature Size: 5529 bytes Desc: not available URL: From it at festa.bg Mon May 4 18:22:45 2020 From: it at festa.bg (Valentin Laskov) Date: Mon, 4 May 2020 21:22:45 +0300 Subject: Could I qurantine the message if attachment tests do not pass In-Reply-To: <005d01d621ec$cf205750$6d6105f0$@flytonet.com> References: <005d01d621ec$cf205750$6d6105f0$@flytonet.com> Message-ID: <3db831fc-9470-f994-86c8-4f160855b945@festa.bg> Hi, In /etc/MailScanner/filename.rules.conf and in /etc/MailScanner/archives.filename.rules.conf I have manager at festa.bg??????? \.rar$? Possible virus in archive. Restricted by Laskov manager at festa.bg??????? \.r[0-9]{1,2}$? Possible virus in archive.????? Restricted by Laskov manager at festa.bg??????? \.tar\.([b|g]z?2)$????? Possible virus in archive.????? Restricted by Laskov manager at festa.bg??????? \.img$? Possible virus in archive. Restricted by Laskov This forwards messages with such attachments to me for a manual review. Regards Valentin ?? 4.05.20 ?. ? 11:20 ?., ???? ??????: > > Hi, > > I had set a rule for blocking some filenames. > > After the test of attachment, the attachments which are not allowed > had been removed, but the email had still been delivered to user with > no attachments. > > If I don?t want the user to receive the message before the > administrator has checked, could I qurantine the message if attachment > tests of Mailscanner do not pass ? > > Some settings of MailScanner.conf > > ================================== > > Filename Rules = %etc-dir%/filescan.rules > > Quarantine Whole Message = yes > > Quarantine Infections = yes > > =================================== > > Thanks in advance. > > zephyr > > > -- ????????! ???????? ?????? ???????? ????????????? "????? ???????" ?? ???. "??. ?????????" 48 9000 ??. ????? ???.: +359 52 669137 GSM: +359 888 669137 Fax: +359 52 669110 -------------- next part -------------- An HTML attachment was scrubbed... URL: From zephyr at flytonet.com Thu May 21 01:38:28 2020 From: zephyr at flytonet.com (=?utf-8?B?5b6u5ZKM55qE6aKo?=) Date: Thu, 21 May 2020 09:38:28 +0800 Subject: Message is too big for available disk space in /var/spool/MailScanner/incoming, skipping it Message-ID: <000601d62f10$88c76740$9a5635c0$@flytonet.com> A non-text attachment was scrubbed... Name: smime.p7m Type: application/pkcs7-mime Size: 7988 bytes Desc: not available URL: From it at festa.bg Thu May 21 09:31:20 2020 From: it at festa.bg (Valentin Laskov) Date: Thu, 21 May 2020 12:31:20 +0300 Subject: Message is too big for available disk space in /var/spool/MailScanner/incoming, skipping it In-Reply-To: <000601d62f10$88c76740$9a5635c0$@flytonet.com> References: <000601d62f10$88c76740$9a5635c0$@flytonet.com> Message-ID: Hi, look what is in your Unrar Command = option. and try to run it manualy. E.g. if it is "Unrar Command = /usr/bin/unrar" try to run /usr/bin/unrar your_rar_file.rar What is the result? ?? 21.05.2020 ? 04:38, ???? ??????: > Hi, > > I have an email(total size about 16M,contains 4 files of rar) to send to > customer,but encountered some problems. > > The error message is as follows: > > mail MailScanner[22095]: Message CAF7C1F6D2F.A2302 is too big for available > disk space in /var/spool/MailScanner/incoming, skipping it > > I check "df -h", and show as below. Seems to have enough free size. Why does > the above problem occur?? > > ???? ?? ?? ?? ??% ??? > devtmpfs 3.4G 0 3.4G 0% /dev > tmpfs 3.4G 0 3.4G 0% /dev/shm > tmpfs 3.4G 343M 3.0G 11% /run > tmpfs 3.4G 0 3.4G 0% /sys/fs/cgroup > /dev/mapper/cl_mail2-root 50G 8.3G 42G 17% / > tmpfs 256M 364K 256M 1% > /var/spool/MailScanner/incoming > /dev/mapper/cl_mail2-home 45G 451M 44G 1% /home > /dev/sda2 976M 250M 660M 28% /boot > /dev/sda1 599M 6.8M 593M 2% /boot/efi > tmpfs 681M 1.2M 680M 1% /run/user/42 > tmpfs 681M 4.6M 676M 1% /run/user/1093 > /dev/sr0 7.1G 7.1G 0 100% > /run/media/zephyr/CentOS-8-1-1911-x86_64-dvd > tmpfs 681M 0 681M 0% /run/user/0 > > Thanks for your help in advance. > > ZEPHYR > From zephyr at flytonet.com Mon May 25 05:33:07 2020 From: zephyr at flytonet.com (=?UTF-8?B?5b6u5ZKM55qE6aKo?=) Date: Mon, 25 May 2020 13:33:07 +0800 Subject: Message is too big for available disk space in /var/spool/MailScanner/incoming, skipping it Message-ID: <001701d63255$f9db34f0$ed919ed0$@flytonet.com> A non-text attachment was scrubbed... Name: smime.p7m Type: application/pkcs7-mime Size: 10016 bytes Desc: not available URL: From shawniverson at summitgrid.com Mon May 25 20:42:44 2020 From: shawniverson at summitgrid.com (Shawn Iverson) Date: Mon, 25 May 2020 16:42:44 -0400 Subject: MailScanner 5.3.3-1 Released Message-ID: <41e268f1-3e91-e73e-79a6-6c530812b753@summitgrid.com> Dear MailScanner list, MailScanner version 5.3.3-1 is now available. Special thanks to Andrew Colin Kissa of Baruwa for contributing 5 updated antivirus wrappers and cleaning up duplicate code! I am in the process of making changes to automate the build testing and packaging of MailScanner to better detect self-inflicted harm ;) As part of that process, the Build* scripts will no longer prompt for a version and will read the VERSION file located in the repository and have simpler code.? Also, the ~/msbuilds directory has been flattened since each package has a unique name and makes automation easier. Please note that official builds are now part of the release tagging in Github, located here, instead of the source repo, where they can be downloaded. https://github.com/MailScanner/v5/releases -- Shawn Iverson shawniverson at summitgrid.com -------------- next part -------------- An HTML attachment was scrubbed... URL: