<p>... Which probably mean you use better file magic;-) </p>
<p>Cheers<br>
-- <br>
-- Glenn</p>
<div class="gmail_quote">Den 3 okt 2011 16:32 skrev "Kevin Kobb" <<a href="mailto:kkobb@skylinecorp.com">kkobb@skylinecorp.com</a>>:<br type="attribution">> <br>> On 10/3/2011 9:51 AM, Johan Hendriks wrote:<br>
>>> Hi guys<br>>>><br>>>> I'm having problems with text being detected as MPEG files.<br>>>> The error I'm getting from MS is:<br>>>><br>>>> The following e-mails were found to have: Bad Filename Detected<br>
>>><br>>>> Sender: <a href="mailto:xxxxx@example.com">xxxxx@example.com</a><br>>>> IP Address: 192.168.0.210<br>>>> Recipient: yyyyy@example.>org<br>>>> Subject: RE: Statistik<br>
>>> MessageID: p937N5Zx000344<br>>>> Quarantine: /var/spool/MailScanner/quarantine/20111003/p937N5Zx000344<br>>>> Report: MailScanner: No MPEG movies allowed (msg-2048-10.txt)<br>>>><br>
>>> This has been up before, but can't seem to find the solution.<br>>>><br>>>> Any clues on how to handle this?<br>>>><br>>>> The first couple of lines in the file is ( ? = danish character æ ):<br>
>>><br>>>> V?rsgo<br>>>><br>>>> Glostrup Pakke blev ikke solgt i denne periode...<br>>>><br>>>> The first 8 bytes of 'msg-2048-10.txt' in HEX are:<br>>>><br>
>>> 00000000 56 E6 72 73 ¦ 67 6F 0A 20<br>>>><br>>>> Using the file command, i get:<br>>>><br>>>> # file msg-2048-10.txt<br>>>> msg-2048-10.txt: MPEG-4 LOAS<br>>>><br>
>>> Adding an -i parameter give:<br>>>><br>>>> # file -i msg-2048-10.txt<br>>>> msg-2048-10.txt: audio/x-mp4a-latm; charset=iso-8859-1<br>>>><br>>>> # MailScanner -V<br>
>>> Running on<br>>>> Linux gphgw 2.6.30.5 #1 SMP PREEMPT Mon Sep 14 11:49:43 CEST 2009<br>>>> i686 Intel(R) Core(TM)2 Duo CPU E7400 @ 2.80GHz GenuineIntel GNU/Linux<br>>>><br>>>> This is Perl version 5.010001 (5.10.1)<br>
>>> This is MailScanner version 4.82.6<br>>>> SpamAssassin 3.3.1<br>>>><br>>>> All perl modules are up to date.<br>>>><br>>>> -- <br>>>> Later<br>>>><br>
>>> Mogens Melander<br>>> <br>>> As far as i know, it is not clamav that Marks this as a non deliverable mail but Mailscanner itself.<br>>> I have the same problem, but on my systems (FreeBSD) these file manifest themselves as .com aka executeables.<br>
>> <br>>> Sender: <a href="mailto:xxxx@yyyy.com">xxxx@yyyy.com</a><br>>> IP Address: 85.233.160.19<br>>> Recipient: <a href="mailto:aaaaaa@bbbbbbb.com">aaaaaa@bbbbbbb.com</a><br>>> Subject: ??: {Filename?} ??: ??? ????<br>
>> MessageID: 6CE3ED46417.AFAF9<br>>> Quarantine: /var/spool/MailScanner/quarantine/20110929/6CE3ED46417.AFAF9<br>>> Report: MailScanner: No programs allowed (msg-85973-48.txt)<br>>> <br>>> I still have not find a way to let them pass without allowing executeables for the domains that send them.<br>
>> <br>>> Regards<br>>> Johan Hendriks<br>>> <br>>> <br>>> <br>>> <br>>> <br>> On FreeBSD, I have found that using the file command from ports<br>> (sysutils/file) rather than the base system, took care of a lot of these<br>
> problems. The ports version is much newer.<br>> <br>> Just make sure to update the file command path in your mailscanner config.<br>> -- <br>> MailScanner mailing list<br>> <a href="mailto:mailscanner@lists.mailscanner.info">mailscanner@lists.mailscanner.info</a><br>
> <a href="http://lists.mailscanner.info/mailman/listinfo/mailscanner">http://lists.mailscanner.info/mailman/listinfo/mailscanner</a><br>> <br>> Before posting, read <a href="http://wiki.mailscanner.info/posting">http://wiki.mailscanner.info/posting</a><br>
> <br>> Support MailScanner development - buy the book off the website! <br></div>