From shawniverson at summitgrid.com Sun Oct 9 22:14:58 2022 From: shawniverson at summitgrid.com (Shawn Iverson) Date: Sun, 9 Oct 2022 18:14:58 -0400 Subject: Beta label In-Reply-To: <20220924152054.GA31654@pa0rda.nl> References: <20220924152054.GA31654@pa0rda.nl> Message-ID: <94e3bb09-25d6-18dc-ece5-2bdc751d3f7d@summitgrid.com> Hello Adrian and list, Beta tag is now cleared from 5.4.5-1 and now working on next minor release which will be in beta for the next round. On 9/24/22 11:20, Adrian van Bloois wrote: > Hi, > How long is that label beta going to stay on MailScanner 5.4.5-1? > > Adrian > > > From mailscanner at barendse.to Mon Oct 10 08:16:55 2022 From: mailscanner at barendse.to (mailscanner at barendse.to) Date: Mon, 10 Oct 2022 10:16:55 +0200 (CEST) Subject: New attachment type? Message-ID: Hello list Just received a new virus mail where the body of the text is asking to "update" IMAP adress blabla There is a 159 byte attachment with the email named "open" without any extension at the end. Outlook does seem to recognize it as there it places an icon before the attachment (windows logo at the top with a rectangle at the bottom). Is anyone else seeing this, how can I stop it or how can I block attachments without extension? Thanks!! Remco From shawniverson at summitgrid.com Mon Oct 10 09:39:49 2022 From: shawniverson at summitgrid.com (Shawn Iverson) Date: Mon, 10 Oct 2022 05:39:49 -0400 Subject: New attachment type? In-Reply-To: References: Message-ID: <5e2f0d6e-896c-b30c-9023-d7431554fbb9@summitgrid.com> I've seen a few of these kind.? You can use mailscanner to look for an attachment simply named "open$" in this case or try looking for a generic pattern such as [a-z0-9]+[^\.]?? (I haven't tried a negative regex in MailScanner so not sure offhand if that will work. In SA you can also use mimeheader to do a similar check. I do know you can use a negative there. On 10/10/22 04:16, mailscanner at barendse.to wrote: > Hello list > > Just received a new virus mail where the body of the text is asking to > "update" IMAP adress blabla > > There is a 159 byte attachment with the email named "open" without any > extension at the end. Outlook does seem to recognize it as there it > places an icon before the attachment (windows logo at the top with a > rectangle at the bottom). > > Is anyone else seeing this, how can I stop it or how can I block > attachments without extension? > > Thanks!! > Remco > > From it at festa.bg Mon Oct 10 10:26:51 2022 From: it at festa.bg (Valentin Laskov) Date: Mon, 10 Oct 2022 13:26:51 +0300 Subject: New attachment type? In-Reply-To: References: Message-ID: <2720a1e8-8e67-0313-df08-f967108cbcba@festa.bg> Hello, Did you try /usr/bin/file --mime-type open to determine file type? See https://www.mailscanner.info/MailScanner.conf.index.html#Filetype%20Rules "... accept or reject file attachments based on their content as determined by the "file" command ..." Regards! Valentin ?? 10.10.2022 ? 11:16, mailscanner at barendse.to ??????: > Hello list > > Just received a new virus mail where the body of the text is asking to > "update" IMAP adress blabla > > There is a 159 byte attachment with the email named "open" without any > extension at the end. Outlook does seem to recognize it as there it > places an icon before the attachment (windows logo at the top with a > rectangle at the bottom). > > Is anyone else seeing this, how can I stop it or how can I block > attachments without extension? > > Thanks!! > Remco > > From pparsons at techeez.com Fri Oct 28 20:14:20 2022 From: pparsons at techeez.com (Philip Parsons) Date: Fri, 28 Oct 2022 20:14:20 +0000 Subject: New install MailScanner Not processing mail Message-ID: Operating System Version: Ubuntu 22.04.1 LTS (Jammy Jellyfish) Sendmail Version: 8.15.2 MailScanner Version: 5.4.5 ClamAV Version: 0.103.6 SpamAssassin Version: 3.4.6 Testing mail gets relayed through sendmail but Mailscanner is not processing it. It seems like sendmail just handles the request ? All way installed via the scripts with no errors. Mailscanner -lint shows no errors... -------------- next part -------------- An HTML attachment was scrubbed... URL: From pparsons at techeez.com Sat Oct 29 00:35:34 2022 From: pparsons at techeez.com (Philip Parsons) Date: Sat, 29 Oct 2022 00:35:34 +0000 Subject: New install MailScanner Not processing mail In-Reply-To: References: Message-ID: Update I have figured it out the options for sendmail stating where not in the sendmail.conf script so it did not know to use the new files.. From: MailScanner On Behalf Of Philip Parsons Sent: October 28, 2022 1:14 PM To: mailscanner at lists.mailscanner.info Subject: New install MailScanner Not processing mail Operating System Version: Ubuntu 22.04.1 LTS (Jammy Jellyfish) Sendmail Version: 8.15.2 MailScanner Version: 5.4.5 ClamAV Version: 0.103.6 SpamAssassin Version: 3.4.6 Testing mail gets relayed through sendmail but Mailscanner is not processing it. It seems like sendmail just handles the request ? All way installed via the scripts with no errors. Mailscanner -lint shows no errors... -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -------------- next part -------------- An HTML attachment was scrubbed... URL: