<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
<META NAME="Generator" CONTENT="MS Exchange Server version 5.5.2655.35">
<TITLE>RE: Attachments are not scanned - still is not rejecting denied extensions like .exe</TITLE>
</HEAD>
<BODY>
<P><FONT SIZE=2>What you're doing doesn't attach the .exe file, it make the .exe file the contents of the email.</FONT>
</P>
<P><FONT SIZE=2>uuencode is a pretty easy way of attaching files from the command line.</FONT>
</P>
<P><FONT SIZE=2>uuencode whatever.exe < whatever.exe | mail -s "Whatever" whoever@wherever.com</FONT>
</P>
<P><FONT SIZE=2>-----Original Message-----</FONT>
<BR><FONT SIZE=2>From: Matthew Bowman [<A HREF="mailto:mbowman@udcom.com">mailto:mbowman@udcom.com</A>]</FONT>
<BR><FONT SIZE=2>Sent: Wednesday, January 08, 2003 4:06 PM</FONT>
<BR><FONT SIZE=2>To: MAILSCANNER@jiscmail.ac.uk</FONT>
<BR><FONT SIZE=2>Subject: Re: Attachments are not scanned - still is not rejecting denied</FONT>
<BR><FONT SIZE=2>extensions like .exe</FONT>
</P>
<BR>
<P><FONT SIZE=2>Hello Magda</FONT>
</P>
<P><FONT SIZE=2>The server that you are running mail -v on - does that run MailScanner?</FONT>
<BR><FONT SIZE=2>I ran a similiar command to yours on my server running MailScanner and it</FONT>
<BR><FONT SIZE=2>sent it through embedded into the e-mail not as an attachment.</FONT>
<BR><FONT SIZE=2>I then sent an e-mail from a domain thats filtered through MailScanner with</FONT>
<BR><FONT SIZE=2>an attachment .exe and it removed the file from the e-mail ok.</FONT>
</P>
<P><FONT SIZE=2>Regards,</FONT>
</P>
<P><FONT SIZE=2>Matthew K Bowman</FONT>
<BR><FONT SIZE=2>Systems Administrator; Hostmaster; Miva Administrator</FONT>
<BR><FONT SIZE=2>Universal Digital Communications, Mansfield Ohio.</FONT>
</P>
<BR>
<BR>
<BR>
<P><FONT SIZE=2> Magda Hewryk</FONT>
<BR><FONT SIZE=2> <MHewryk@SYMCOR.CO To: MAILSCANNER@JISCMAIL.AC.UK</FONT>
<BR><FONT SIZE=2> M> cc:</FONT>
<BR><FONT SIZE=2> Sent by: Subject: Re: Attachments are not scanned - still is not rejecting denied extensions like</FONT></P>
<P><FONT SIZE=2> MailScanner .exe</FONT>
<BR><FONT SIZE=2> mailing list</FONT>
<BR><FONT SIZE=2> <MAILSCANNER@JISCM</FONT>
<BR><FONT SIZE=2> AIL.AC.UK></FONT>
</P>
<BR>
<P><FONT SIZE=2> 01/08/2003 03:54</FONT>
<BR><FONT SIZE=2> PM</FONT>
<BR><FONT SIZE=2> Please respond to</FONT>
<BR><FONT SIZE=2> MailScanner</FONT>
<BR><FONT SIZE=2> mailing list</FONT>
</P>
<BR>
<BR>
<BR>
<BR>
<P><FONT SIZE=2>Hi,</FONT>
</P>
<P><FONT SIZE=2>I've changed config file for Scanning and Scanner's but still MailScanner</FONT>
<BR><FONT SIZE=2>doesn't flag the email as "wrong attachment"</FONT>
</P>
<P><FONT SIZE=2>Virus Scanning = yes</FONT>
<BR><FONT SIZE=2>Virus Scanners = none</FONT>
</P>
<P><FONT SIZE=2># mail -v mhewryk -s "report No. 5" < f-prot.exe</FONT>
</P>
<P><FONT SIZE=2>Jan 8 15:48:46 tonka MailScanner[6561]: New Batch: Scanning 1 messages,</FONT>
<BR><FONT SIZE=2>28455 bytes</FONT>
<BR><FONT SIZE=2>Jan 8 15:48:48 tonka MailScanner[6561]: Spam Checks: Starting</FONT>
<BR><FONT SIZE=2>Jan 8 15:49:02 tonka MailScanner[6561]: RBL Check timed out and was</FONT>
<BR><FONT SIZE=2>killed, consecutive failure 1 of 7</FONT>
<BR><FONT SIZE=2>Jan 8 15:51:07 tonka MailScanner[6561]: Virus and Content Scanning:</FONT>
<BR><FONT SIZE=2>Starting</FONT>
<BR><FONT SIZE=2>Jan 8 15:51:07 tonka MailScanner[6561]: Uninfected: Delivered 1 messages</FONT>
</P>
<P><FONT SIZE=2>Thanks,</FONT>
</P>
<P><FONT SIZE=2>Magda Hewryk</FONT>
<BR><FONT SIZE=2>--------------------------------</FONT>
<BR><FONT SIZE=2>Mid-Range Systems</FONT>
<BR><FONT SIZE=2>RSP: 905-273-1637</FONT>
<BR><FONT SIZE=2>CELL: 416-948-4427</FONT>
</P>
<BR>
<BR>
<P><FONT SIZE=2> "Spicer, Kevin"</FONT>
<BR><FONT SIZE=2> <Kevin.Spicer@BMRB To:</FONT>
<BR><FONT SIZE=2>MAILSCANNER@JISCMAIL.AC.UK</FONT>
<BR><FONT SIZE=2> .CO.UK> cc:</FONT>
<BR><FONT SIZE=2> Sent by: Subject: Re: Attachments</FONT>
<BR><FONT SIZE=2>are not scanned - no help from</FONT>
<BR><FONT SIZE=2> MailScanner anybody?</FONT>
<BR><FONT SIZE=2> mailing list</FONT>
<BR><FONT SIZE=2> <MAILSCANNER@JISCM</FONT>
<BR><FONT SIZE=2> AIL.AC.UK></FONT>
</P>
<BR>
<P><FONT SIZE=2> 01/08/2003 03:10</FONT>
<BR><FONT SIZE=2> PM</FONT>
<BR><FONT SIZE=2> Please respond to</FONT>
<BR><FONT SIZE=2> MailScanner</FONT>
<BR><FONT SIZE=2> mailing list</FONT>
</P>
<BR>
<BR>
<BR>
<BR>
<BR>
<P><FONT SIZE=2>> Some configurations from my MailScanner.conf</FONT>
<BR><FONT SIZE=2>> =====================================</FONT>
<BR><FONT SIZE=2>> Virus Scanning = no</FONT>
<BR><FONT SIZE=2>> Filename Rules = /etc/MailScanner/filename.rules.conf</FONT>
<BR><FONT SIZE=2>> Quarantine Infections = yes</FONT>
<BR><FONT SIZE=2>> Deleted Bad Filename Message Report =</FONT>
<BR><FONT SIZE=2>> /etc/MailScanner/reports/en/deleted.filename.message.txt</FONT>
<BR><FONT SIZE=2>> Stored Bad Filename Message Report =</FONT>
<BR><FONT SIZE=2>> /etc/MailScanner/reports/en/stored.filename.message.txt</FONT>
<BR><FONT SIZE=2>></FONT>
<BR><FONT SIZE=2>Virus Scanning = no turns off all processing of the messages. I think you</FONT>
<BR><FONT SIZE=2>want</FONT>
</P>
<P><FONT SIZE=2>Virus Scanning = yes</FONT>
<BR><FONT SIZE=2>Virus Scanners = none</FONT>
</P>
<P><FONT SIZE=2>[The config files suggest you can turn off virus scanning by Virus Scanners</FONT>
<BR><FONT SIZE=2>= sophos - but I suspect that's an error, maybe its fixed in 4.11?]</FONT>
</P>
</BODY>
</HTML>