what version of MS?<br><br>I never inform the sender of junk as you end up with fake messages sent out.<br><br clear="all">-- <br>Martin Hepworth<br>Oxford, UK<br>
<br><br><div class="gmail_quote">On 1 September 2011 08:17, Joolee <span dir="ltr"><<a href="mailto:mailscanner@joolee.nl">mailscanner@joolee.nl</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">
Hallo Everybody,<br><br>I've experienced a small flood of virus E-mails.
These E-mails (subj.: "ACH Payment *random number* Canceled") contain
attachments named like: "report_082011-65.pdf.exe"<br>They obviously get
blocked by the "no executables" and "No double file extensions" rules.
The problem is that after blocking them, an automated E-mail is send to the original recipient and the
(faked) sender of the message, informing them of the blocked attachment.<br>
<br>Had the E-mails been processed further, they would've
probably hit the virusscanner (not tested) or spamassassin (gives a score
of 27 when tested) and the E-mail would've silently been discarded as a virus / spam / phishing.<br><br>Is it
possible to let the MailScanner continue it's processing when hitting
the file name rules and / or running the filename rule at a later time?
<br>--<br>
MailScanner mailing list<br>
<a href="mailto:mailscanner@lists.mailscanner.info">mailscanner@lists.mailscanner.info</a><br>
<a href="http://lists.mailscanner.info/mailman/listinfo/mailscanner" target="_blank">http://lists.mailscanner.info/mailman/listinfo/mailscanner</a><br>
<br>
Before posting, read <a href="http://wiki.mailscanner.info/posting" target="_blank">http://wiki.mailscanner.info/posting</a><br>
<br>
Support MailScanner development - buy the book off the website!<br>
<br></blockquote></div><br>