<div>thanks!</div>
<div>May i set it like this?</div>
<div> </div>
<div>#File Command = /usr/bin/file</div>
<div>File Commnad =</div>
<div><br><br> </div>
<div><span class="gmail_quote">2006/6/26, Martin Hepworth <<a href="mailto:martinh@solid-state-logic.com">martinh@solid-state-logic.com</a>>:</span>
<blockquote class="gmail_quote" style="PADDING-LEFT: 1ex; MARGIN: 0px 0px 0px 0.8ex; BORDER-LEFT: #ccc 1px solid">Hi<br><br>The 'file' program said the attachment was an executable....<br><br>--<br>Martin Hepworth<br>Snr Systems Administrator
<br>Solid State Logic<br>Tel: +44 (0)1865 842300<br><br>> -----Original Message-----<br>> From: <a href="mailto:mailscanner-bounces@lists.mailscanner.info">mailscanner-bounces@lists.mailscanner.info</a> [mailto:<a href="mailto:mailscanner-">
mailscanner-</a><br>> <a href="mailto:bounces@lists.mailscanner.info">bounces@lists.mailscanner.info</a>] On Behalf Of Gong Chaoyin<br>> Sent: 26 June 2006 11:36<br>> To: <a href="mailto:mailscanner@lists.mailscanner.info">
mailscanner@lists.mailscanner.info</a><br>> Subject: what happend? Report: MailScanner: No programs allowed(msg-9368-<br>> 6.txt)<br>><br>> please help me! the log:<br>><br>> new Batch: Found 2 messages waiting
<br>> Jun 22 12:48:47 mail MailScanner[9368]: New Batch: Scanning<br>> 1 messages, 36442 bytes<br>> Jun 22 12:48:47 mail MailScanner[9368]: Virus and Content<br>> Scanning: Starting<br>> Jun 22 12:48:47 mail MailScanner[9368]: Filetype Checks: No
<br>> executables (1FtH7W-0002Tm-S5 0)<br>> Jun 22 12:48:47 mail MailScanner[9368]: Filetype Checks: No<br>> executables (1FtH7W-0002Tm-S5 msg-9368-3.txt)<br>> Jun 22 12:48:47 mail MailScanner[9368]: Other Checks: Found
<br>> 2 problems<br>> Jun 22 12:48:47 mail MailScanner[9368]: Saved entire<br>> message to<br>> /var/spool/MailScanner/quarantine/20060622/1FtH7W-0002Tm-S5<br>> Jun 22 12:48:47 mail MailScanner[9368]: Saved infected
<br>> "msg-9368-3.txt" to<br>> /var/spool/MailScanner/quarantine/20060622/1FtH7W-0002Tm-S5<br>> Jun 22 12:48:47 mail MailScanner[9368]: Notices: Warned<br>><br>> The following e-mails were found to have: Bad Filename Detected
<br>><br>> Sender: <a href="mailto:xiajianping@xxxxxxxx.com">xiajianping@xxxxxxxx.com</a><br>> IP Address: MailScanner warning: numerical links are often malicious:<br>> <a href="http://61.142.114.180">61.142.114.180
</a> <<a href="http://61.142.114.180">http://61.142.114.180</a>><br>> Recipient: <a href="mailto:DHUANG@yyyyy.com">DHUANG@yyyyy.com</a>, <a href="mailto:alancheung@yyyyy.com">alancheung@yyyyy.com</a><br>> Subject: ??: ??????PO#G0605207?
<br>> MessageID: 1FtH7W-0002Tm-S5<br>> Quarantine: /var/spool/MailScanner/quarantine/20060622/1FtH7W-0002Tm-S5<br>> Report: MailScanner: No programs allowed (msg-9368-6.txt)<br>> Report: MailScanner: No programs allowed (
msg-9368-3.txt)<br>><br>> /etc/MailScanner/filename.rules.conf<br>><br>> # These are known to be mostly harmless.<br>> allow \.jpg$ - -<br>> allow \.gif$ - -<br>> # .url is arguably dangerous, but I can't just ban it...
<br>> allow \.url$ - -<br>> allow \.vcf$ - -<br>> allow \.txt$ - -<br>> allow \.zip$ - -<br>> allow \.t?gz$ - -<br>> allow \.bz2$ - -<br>> allow \.Z$ - -<br>> allow \.rpm$ - -<br>> # PGP and GPG
<br>> allow \.gpg$ - -<br>> allow \.pgp$ - -<br>> allow \.sit$ - -<br>> allow \.asc$ - -<br>> # Macintosh archives<br>> allow \.hqx$ - -<br>> allow \.sit.bin$ - -<br>> allow \.sea$ - -<br>><br>> /etc/MailScanner/filetype.rules.conf
<br>><br>> allow text - -<br>> allow script - -<br>> allow archive - -<br>> allow postscript - -<br>> deny self-extract No self-extracting archives No self-extracting archives<br>> allowed<br>> deny executable No executables No programs allowed
<br>> deny ELF No executables No programs allowed<br>> deny Registry No Windows Registry entries No Windows Registry files<br>> allowed<br>><br>> #deny MPEG No MPEG movies No MPEG movies allowed<br>> #deny AVI No AVI movies No AVI movies allowed
<br>> #deny MNG No MNG/PNG movies No MNG movies allowed<br>> #deny QuickTime No QuickTime movies No QuickTime movies allowed<br>> #deny ASF No Windows media No Windows media files allowed<br>> #deny metafont No Windows Metafont drawings No WMF drawings allowed
<br>><br>> what happend?<br>><br><br><br>**********************************************************************<br><br>This email and any files transmitted with it are confidential and<br>intended solely for the use of the individual or entity to whom they
<br>are addressed. If you have received this email in error please notify<br>the system manager.<br><br>This footnote confirms that this email message has been swept<br>for the presence of computer viruses and is believed to be clean.
<br><br>**********************************************************************<br><br>--<br>MailScanner mailing list<br><a href="mailto:mailscanner@lists.mailscanner.info">mailscanner@lists.mailscanner.info</a><br><a href="http://lists.mailscanner.info/mailman/listinfo/mailscanner">
http://lists.mailscanner.info/mailman/listinfo/mailscanner</a><br><br>Before posting, read <a href="http://wiki.mailscanner.info/posting">http://wiki.mailscanner.info/posting</a><br><br>Support MailScanner development - buy the book off the website!
<br></blockquote></div><br>