<div dir="ltr">Follows my confg of mailscanner:<br><br>I appreciate your help!<br><br>observi_2008:~# MailScanner -c<br><br>Table of Changed Values:<br><br>Option Name Default Current Value<br>
===============================================================================<br>addenvelopefromheader yes no<br>allowformtags disarm yes<br>allowiframetags disarm yes<br>
allowobjectcodebasetags disarm yes<br>allowpartialmessages no yes<br>allowpasswordprotectedarchives no yes<br>allowscripttags disarm yes<br>
allowwebbugs disarm yes<br>alwayslookeduplast no FUNCTION:MailWatchLogging<br>attachmentextensionsnottozip .zip .rar .gz .tgz .mpg .mpe .mpeg .mp3 .rpm .zip .rar .gz .tgz .jpg .jpeg .mpg .mpe .mpeg .mp3 .rpm .htm .html .eml<br>
attachmentwarningfilename VirusWarning.txt Domain-Attachment-Warning.txt<br>clamavfullmessagescan no yes<br>clamdlockfile /var/run/clamav/clamd.pid<br>
clamdsocket <a href="http://127.0.0.1">127.0.0.1</a> /var/run/clamav/clamd.ctl<br>contentmodifysubject start yes<br>contentsubjecttext {Dangerous Content?} {Conteudo Perigoso}<br>
customfunctionsdir /usr/lib/MailScanner/MailScanner/CustomFunctions /etc/MailScanner/CustomFunctions<br>definitespamishighscoring no yes<br>deletedbadcontentmessagereport /etc/MailScanner/reports/en/deleted.content.message.txt /etc/MailScanner/reports/pt_br/deleted.content.message.txt<br>
deletedbadfilenamemessagereport /etc/MailScanner/reports/en/deleted.filename.message.txt /etc/MailScanner/reports/pt_br/deleted.filename.message.txt<br>deletedsizemessagereport /etc/MailScanner/reports/en/deleted.size.message.txt /etc/MailScanner/reports/pt_br/deleted.size.message.txt<br>
deletedvirusmessagereport /etc/MailScanner/reports/en/deleted.virus.message.txt /etc/MailScanner/reports/pt_br/deleted.virus.message.txt<br>deliverdisinfectedfiles no yes<br>disarmedmodifysubject start no<br>
disinfectedreport /etc/MailScanner/reports/en/disinfected.report.txt /etc/MailScanner/reports/pt_br/disinfected.report.txt<br>enablespambounce no RULESET:Default=no<br>envelopefromheader X-MailScanner-Envelope-From:<br>
envelopetoheader X-MailScanner-Envelope-To:<br>filenamemodifysubject start yes<br>filenamerules RULESET:Default=/etc/MailScanner/filename.rules.conf<br>
filenamesubjecttext {Filename?} {Anexo}<br>highscoringmcpmodifysubject start yes<br>highscoringspamactions deliver header "X-Spam-Status: Yes" bounce<br>highscoringspammodifysubject start yes<br>
highscoringspamsubjecttext {Spam?} {Spam}<br>highspamassassinscore 10 FUNCTION:SQLHighSpamScores<br>hostname the MailScanner the Domain ()<br>ignoredwebbugfilenames spacer pixel.gif pixel.png gap<br>
ignorespamwhitelistifrecipientsexceed 20 100<br>incomingqueuedir /var/spool/<a href="http://mqueue.in">mqueue.in</a> /var/spool/postfix/hold<br>incomingworkgroup postfix<br>
incomingworkuser postfix<br>inlinehtmlsignature /etc/MailScanner/reports/en/inline.sig.html /etc/MailScanner/reports/pt_br/inline.sig.html<br>inlinehtmlwarning /etc/MailScanner/reports/en/inline.warning.html /etc/MailScanner/reports/pt_br/inline.warning.html<br>
inlinespamwarning /etc/MailScanner/reports/en/inline.spam.warning.txt /etc/MailScanner/reports/pt_br/inline.spam.warning.txt<br>inlinetextsignature /etc/MailScanner/reports/en/inline.sig.txt /etc/MailScanner/reports/pt_br/inline.sig.txt<br>
inlinetextwarning /etc/MailScanner/reports/en/inline.warning.txt /etc/MailScanner/reports/pt_br/inline.warning.txt<br>isdefinitelynotspam no FUNCTION:ByDomainSpamWhitelist<br>isdefinitelyspam no FUNCTION:ByDomainSpamBlacklist<br>
knownwebbugservers <a href="http://msgtag.com">msgtag.com</a><br>languagestrings /etc/MailScanner/reports/pt_br/languages.conf<br>localpostmaster postmaster <a href="mailto:spam@domain.com">spam@domain.com</a><br>
lockfiledir /var/lock/subsys/MailScanner/ /var/lock/subsys/MailScanner<br>lognonspam no yes<br>logpermittedfilenames no yes<br>logsilentviruses no yes<br>
logspam no yes<br>mailheader X-MailScanner:<br>mailscannerversionnumber 1.0.0 4.66.5<br>maxchildren 5 3<br>
maximumarchivedepth 2 10<br>maximumattachmentspermessage 200 15<br>maximummessagesize 0 10485760<br>maxnormalqueuesize 800 1000<br>
maxspamassassinsize 30000 200000<br>maxspamassassintimeouts 10 100<br>maxspamchecksize 150000 65000000<br>maxspamlisttimeouts 7 70<br>
mcpheader X-MailScanner-MCPCheck: X-Domain-MailScanner-MCPCheck:<br>mcpmaxspamassassinsize 100000 200000<br>mcpmaxspamassassintimeouts 20 50<br>mcpmodifysubject start yes<br>
mcpspamassassintimeout 10 50<br>monitorsforclamavupdates /usr/local/share/clamav/*.cvd /var/lib/clamav/*.cvd<br>mta sendmail postfix<br>nonforgingviruses Joke/ OF97/ WM97/ W97M/ eicar<br>
nonspamactions deliver header "X-Spam-Status: No" deliver<br>noticesfrom MailScanner Firewall Domain<br>noticesignature -- \nMailScanner\nEmail Virus Scanner\<a href="http://nwww.mailscanner.info">nwww.mailscanner.info</a> -- \nDomain Ltda\nObservi_2008\<a href="http://nwww.domain.com">nwww.domain.com</a><br>
noticesto postmaster <a href="mailto:spam@domain.com">spam@domain.com</a><br>notifysenders yes no<br>notifysendersofblockedfilenamesorfiletypes yes no<br>
notifysendersofotherblockedcontent yes no<br>notifysendersofviruses no yes<br>outgoingqueuedir /var/spool/mqueue /var/spool/postfix/incoming<br>phishingsubjecttext {Fraud?} {Fraud}<br>
pidfile /var/run/MailScanner.pid /var/run/MailScanner/MailScanner.pid<br>quarantinegroup www-data<br>quarantinepermissions 0600 0777<br>quarantinesilentviruses no yes<br>
quarantineuser postfix<br>quarantinewholemessage no yes<br>recipientmcpreport /etc/MailScanner/reports/en/recipient.mcp.report.txt /etc/MailScanner/reports/pt_br/recipient.mcp.report.txt<br>
recipientspamreport /etc/MailScanner/reports/en/recipient.spam.report.txt /etc/MailScanner/reports/pt_br/recipient.spam.report.txt<br>rejectionreport /etc/MailScanner/reports/en/message.rejection.report.txt /etc/MailScanner/reports/pt_br/rejection.report.txt<br>
requiredspamassassinscore 6 FUNCTION:SQLSpamScores<br>runasgroup 0 postfix<br>runasuser 0 postfix<br>senderbadcontentreport /etc/MailScanner/reports/en/sender.content.report.txt /etc/MailScanner/reports/pt_br/sender.content.report.txt<br>
senderbadfilenamereport /etc/MailScanner/reports/en/sender.filename.report.txt /etc/MailScanner/reports/pt_br/sender.filename.report.txt<br>sendererrorreport /etc/MailScanner/reports/en/sender.error.report.txt /etc/MailScanner/reports/pt_br/sender.error.report.txt<br>
sendermcpreport /etc/MailScanner/reports/en/sender.mcp.report.txt /etc/MailScanner/reports/pt_br/sender.mcp.report.txt<br>sendersizereport /etc/MailScanner/reports/en/sender.size.report.txt /etc/MailScanner/reports/pt_br/sender.size.report.txt<br>
senderspamassassinreport /etc/MailScanner/reports/en/sender.spam.sa.report.txt /etc/MailScanner/reports/pt_br/sender.spam.sa.report.txt<br>senderspamlistreport /etc/MailScanner/reports/en/sender.spam.rbl.report.txt /etc/MailScanner/reports/pt_br/sender.spam.rbl.report.txt<br>
senderspamreport /etc/MailScanner/reports/en/sender.spam.report.txt /etc/MailScanner/reports/pt_br/sender.spam.report.txt<br>sendervirusreport /etc/MailScanner/reports/en/sender.virus.report.txt /etc/MailScanner/reports/pt_br/sender.virus.report.txt<br>
sendmail2 /usr/sbin/sendmail /usr/sbin/sendmail -DOUTGOING<br>signatureimagefilename /etc/MailScanner/reports/pt_br/sig.jpg<br>signatureimageimgfilename signature.jpg<br>
signmessagesalreadyprocessed no yes<br>spamactions deliver header "X-Spam-Status: Yes" forward <a href="mailto:spam@domain.com">spam@domain.com</a><br>spamassassinautowhitelist yes no<br>
spamassassindefaultrulesdir /etc/spamassassin<br>spamassassininstallprefix /usr/bin<br>spamassassinlocalrulesdir /etc/spamassassin/RuleDuJour<br>spamassassinruleactions /etc/MailScanner/rules/spam.rules<br>
spamassassinsiterulesdir /etc/spamassassin<br>spamassassintimeout 75 200<br>spamassassinuserstatedir /var/lib/MailScanner<br>spamheader X-MailScanner-SpamCheck:<br>
spammodifysubject start yes<br>spamscoreheader X-MailScanner-SpamScore:<br>spamsubjecttext {Spam?} {Spam}<br>storedbadcontentmessagereport /etc/MailScanner/reports/en/stored.content.message.txt /etc/MailScanner/reports/pt_br/stored.content.message.txt<br>
storedbadfilenamemessagereport /etc/MailScanner/reports/en/stored.filename.message.txt /etc/MailScanner/reports/pt_br/stored.filename.message.txt<br>storedsizemessagereport /etc/MailScanner/reports/en/stored.size.message.txt /etc/MailScanner/reports/pt_br/stored.size.message.txt<br>
storedvirusmessagereport /etc/MailScanner/reports/en/stored.virus.message.txt /etc/MailScanner/reports/pt_br/stored.virus.message.txt<br>treatinvalidwatermarkswithnosenderasspam spam nothing<br>usewatermarking yes no<br>
virusmodifysubject start yes<br>virusscanners auto clamav<br>virusscannertimeout 300 3000<br>virussubjecttext {Virus?} {Virus}<br>
watermarkheader MailScanner-NULL-Check: X-domain-MailScanner-Watermark:<br>watermarksecret Watermark-secret Domain-Secret<br>webbugreplacement <a href="http://www.mailscanner.info/images/1x1spacer.gif">http://www.mailscanner.info/images/1x1spacer.gif</a> <a href="http://www.sng.ecs.soton.ac.uk/mailscanner/images/1x1spacer.gif">http://www.sng.ecs.soton.ac.uk/mailscanner/images/1x1spacer.gif</a><br>
<br><br><div class="gmail_quote">2008/8/13 Hugo van der Kooij <span dir="ltr"><<a href="mailto:hvdkooij@vanderkooij.org">hvdkooij@vanderkooij.org</a>></span><br><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
-----BEGIN PGP SIGNED MESSAGE-----<br>
Hash: SHA1<div><div></div><div class="Wj3C7c"><br>
<br>
Pedro Bordin Hoffmann - [M]orpheus wrote:<br>
| When recieving an e-mail and I have a filename blocking rule, like to<br>
| block jpg.<br>
|<br>
| Why it doesnt send me the e-mail only removing the attachment?<br>
|<br>
| It just blocks the whole e-mail...<br>
|<br>
| How may I still recieve the message, just with the attach removed?<br>
<br></div></div>
That would involve rebuilding the message instead of just blocking it.<br>
Picking it apart is much easier then rebuilding it again with some of<br>
the pieces missing.<br>
<br>
What did you change in the configuration to activate blocking?<br>
What is the output of:<br>
MailScanner -c<br>
<br>
<br>
<br>
Hugo.<br>
<br>
- --<br>
<a href="mailto:hvdkooij@vanderkooij.org" target="_blank">hvdkooij@vanderkooij.org</a> <a href="http://hugo.vanderkooij.org/" target="_blank">http://hugo.vanderkooij.org/</a><br>
PGP/GPG? Use: <a href="http://hugo.vanderkooij.org/0x58F19981.asc" target="_blank">http://hugo.vanderkooij.org/0x58F19981.asc</a><br>
<br>
A: Yes.<br>
>Q: Are you sure?<br>
>>A: Because it reverses the logical flow of conversation.<br>
>>>Q: Why is top posting frowned upon?<br>
<br>
Bored? Click on <a href="http://spamornot.org/" target="_blank">http://spamornot.org/</a> and rate those images.<br>
<br>
-----BEGIN PGP SIGNATURE-----<br>
Version: GnuPG v1.4.7 (GNU/Linux)<br>
<br>
iD8DBQFIo00qBvzDRVjxmYERAiLvAJ0c99ElhDYGvR+P3KWIOvyyOVhnwQCgpVxg<br>
owa8XtnY/7OWZz7hb1Iuucg=<br>
=aAoZ<br>
-----END PGP SIGNATURE-----<br><font color="#888888">
-- <br>
MailScanner mailing list<br>
<a href="mailto:mailscanner@lists.mailscanner.info" target="_blank">mailscanner@lists.mailscanner.info</a><br>
<a href="http://lists.mailscanner.info/mailman/listinfo/mailscanner" target="_blank">http://lists.mailscanner.info/mailman/listinfo/mailscanner</a><br>
<br>
Before posting, read <a href="http://wiki.mailscanner.info/posting" target="_blank">http://wiki.mailscanner.info/posting</a><br>
<br>
Support MailScanner development - buy the book off the website! <br>
</font></blockquote></div><br></div>