<HTML><BODY style="word-wrap: break-word; -khtml-nbsp-mode: space; -khtml-line-break: after-white-space; ">Yes, if you do not want any filetype checking at all.<DIV><BR><DIV><DIV>On 26 Jun 2006, at 11:59, Gong Chaoyin wrote:</DIV><BR class="Apple-interchange-newline"><BLOCKQUOTE type="cite"><DIV>thanks!</DIV> <DIV>May i set it like this?</DIV> <DIV> </DIV> <DIV>#File Command = /usr/bin/file</DIV> <DIV>File Commnad =</DIV> <DIV><BR><BR> </DIV> <DIV><SPAN class="gmail_quote">2006/6/26, Martin Hepworth <<A href="mailto:martinh@solid-state-logic.com">martinh@solid-state-logic.com</A>>:</SPAN> <BLOCKQUOTE class="gmail_quote" style="PADDING-LEFT: 1ex; MARGIN: 0px 0px 0px 0.8ex; BORDER-LEFT: #ccc 1px solid">Hi<BR><BR>The 'file' program said the attachment was an executable....<BR><BR>--<BR>Martin Hepworth<BR>Snr Systems Administrator <BR>Solid State Logic<BR>Tel: +44 (0)1865 842300<BR><BR>> -----Original Message-----<BR>> From: <A href="mailto:mailscanner-bounces@lists.mailscanner.info">mailscanner-bounces@lists.mailscanner.info</A> [mailto:<A href="mailto:mailscanner-"> mailscanner-</A><BR>> <A href="mailto:bounces@lists.mailscanner.info">bounces@lists.mailscanner.info</A>] On Behalf Of Gong Chaoyin<BR>> Sent: 26 June 2006 11:36<BR>> To: <A href="mailto:mailscanner@lists.mailscanner.info"> mailscanner@lists.mailscanner.info</A><BR>> Subject: what happend? Report: MailScanner: No programs allowed(msg-9368-<BR>> 6.txt)<BR>><BR>> please help me! the log:<BR>><BR>> new Batch: Found 2 messages waiting <BR>> Jun 22 12:48:47 mail MailScanner[9368]: New Batch: Scanning<BR>> 1 messages, 36442 bytes<BR>> Jun 22 12:48:47 mail MailScanner[9368]: Virus and Content<BR>> Scanning: Starting<BR>> Jun 22 12:48:47 mail MailScanner[9368]: Filetype Checks: No <BR>> executables (1FtH7W-0002Tm-S5 0)<BR>> Jun 22 12:48:47 mail MailScanner[9368]: Filetype Checks: No<BR>> executables (1FtH7W-0002Tm-S5 msg-9368-3.txt)<BR>> Jun 22 12:48:47 mail MailScanner[9368]: Other Checks: Found <BR>> 2 problems<BR>> Jun 22 12:48:47 mail MailScanner[9368]: Saved entire<BR>> message to<BR>> /var/spool/MailScanner/quarantine/20060622/1FtH7W-0002Tm-S5<BR>> Jun 22 12:48:47 mail MailScanner[9368]: Saved infected <BR>> "msg-9368-3.txt" to<BR>> /var/spool/MailScanner/quarantine/20060622/1FtH7W-0002Tm-S5<BR>> Jun 22 12:48:47 mail MailScanner[9368]: Notices: Warned<BR>><BR>> The following e-mails were found to have: Bad Filename Detected <BR>><BR>> Sender: <A href="mailto:xiajianping@xxxxxxxx.com">xiajianping@xxxxxxxx.com</A><BR>> IP Address: MailScanner warning: numerical links are often malicious:<BR>> <A href="http://61.142.114.180"></B></FONT><font color="red"><b>MailScanner has detected a possible fraud attempt from "61.142.114.180" claiming to be</b></font> <FONT color="red"><B>MailScanner warning: numerical links are often malicious: 61.142.114.180 </A> <<A href="http://61.142.114.180"></B></FONT><font color="red"><b>MailScanner has detected a possible fraud attempt from "61.142.114.180" claiming to be</b></font> <FONT color="red"><B>MailScanner warning: numerical links are often malicious: http://61.142.114.180</A>><BR>> Recipient: <A href="mailto:DHUANG@yyyyy.com">DHUANG@yyyyy.com</A>, <A href="mailto:alancheung@yyyyy.com">alancheung@yyyyy.com</A><BR>> Subject: ??: ??????PO#G0605207? <BR>> MessageID: 1FtH7W-0002Tm-S5<BR>> Quarantine: /var/spool/MailScanner/quarantine/20060622/1FtH7W-0002Tm-S5<BR>> Report: MailScanner: No programs allowed (msg-9368-6.txt)<BR>> Report: MailScanner: No programs allowed ( msg-9368-3.txt)<BR>><BR>> /etc/MailScanner/filename.rules.conf<BR>><BR>> # These are known to be mostly harmless.<BR>> allow \.jpg$ - -<BR>> allow \.gif$ - -<BR>> # .url is arguably dangerous, but I can't just ban it... <BR>> allow \.url$ - -<BR>> allow \.vcf$ - -<BR>> allow \.txt$ - -<BR>> allow \.zip$ - -<BR>> allow \.t?gz$ - -<BR>> allow \.bz2$ - -<BR>> allow \.Z$ - -<BR>> allow \.rpm$ - -<BR>> # PGP and GPG <BR>> allow \.gpg$ - -<BR>> allow \.pgp$ - -<BR>> allow \.sit$ - -<BR>> allow \.asc$ - -<BR>> # Macintosh archives<BR>> allow \.hqx$ - -<BR>> allow \.sit.bin$ - -<BR>> allow \.sea$ - -<BR>><BR>> /etc/MailScanner/filetype.rules.conf <BR>><BR>> allow text - -<BR>> allow script - -<BR>> allow archive - -<BR>> allow postscript - -<BR>> deny self-extract No self-extracting archives No self-extracting archives<BR>> allowed<BR>> deny executable No executables No programs allowed <BR>> deny ELF No executables No programs allowed<BR>> deny Registry No Windows Registry entries No Windows Registry files<BR>> allowed<BR>><BR>> #deny MPEG No MPEG movies No MPEG movies allowed<BR>> #deny AVI No AVI movies No AVI movies allowed <BR>> #deny MNG No MNG/PNG movies No MNG movies allowed<BR>> #deny QuickTime No QuickTime movies No QuickTime movies allowed<BR>> #deny ASF No Windows media No Windows media files allowed<BR>> #deny metafont No Windows Metafont drawings No WMF drawings allowed <BR>><BR>> what happend?<BR>><BR><BR><BR>**********************************************************************<BR><BR>This email and any files transmitted with it are confidential and<BR>intended solely for the use of the individual or entity to whom they <BR>are addressed. If you have received this email in error please notify<BR>the system manager.<BR><BR>This footnote confirms that this email message has been swept<BR>for the presence of computer viruses and is believed to be clean. <BR><BR>**********************************************************************<BR><BR>--<BR>MailScanner mailing list<BR><A href="mailto:mailscanner@lists.mailscanner.info">mailscanner@lists.mailscanner.info</A><BR><A href="http://lists.mailscanner.info/mailman/listinfo/mailscanner"> http://lists.mailscanner.info/mailman/listinfo/mailscanner</A><BR><BR>Before posting, read <A href="http://wiki.mailscanner.info/posting">http://wiki.mailscanner.info/posting</A><BR><BR>Support MailScanner development - buy the book off the website! <BR></BLOCKQUOTE></DIV><BR><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">--<SPAN class="Apple-converted-space"> </SPAN></DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">MailScanner mailing list</DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; "><A href="mailto:mailscanner@lists.mailscanner.info">mailscanner@lists.mailscanner.info</A></DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; "><A href="http://lists.mailscanner.info/mailman/listinfo/mailscanner">http://lists.mailscanner.info/mailman/listinfo/mailscanner</A></DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; min-height: 14px; "><BR></DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">Before posting, read <A href="http://wiki.mailscanner.info/posting">http://wiki.mailscanner.info/posting</A></DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; min-height: 14px; "><BR></DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">Support MailScanner development - buy the book off the website!<SPAN class="Apple-converted-space"> </SPAN></DIV> </BLOCKQUOTE></DIV><BR><DIV> <SPAN class="Apple-style-span" style="border-collapse: separate; border-spacing: 0px 0px; color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; text-align: auto; -khtml-text-decorations-in-effect: none; text-indent: 0px; -apple-text-size-adjust: auto; text-transform: none; orphans: 2; white-space: normal; widows: 2; word-spacing: 0px; "><DIV>-- </DIV><DIV>Julian Field</DIV><DIV><A href="mailto:MailScanner@ecs.soton.ac.uk">MailScanner@ecs.soton.ac.uk</A></DIV><BR class="Apple-interchange-newline"></SPAN> </DIV><BR></DIV></BODY><br />--
<br />This message has been scanned for viruses and
<br />dangerous content by
<a href="http://www.mailscanner.info/"><b>MailScanner</b></a>, and is
<br />believed to be clean.
<br />MailScanner thanks <a href="http://www.transtec.co.uk/">transtec Computers</a> for their support.
</HTML>