It's my filename.rules.conf<br>deny \.cur$ Windows cursor file security vulnerability Possible buffer overflow in Windows<br>deny \.reg$ Possible Windows registry attack Windows registry entries are very dangerous in email<br>
It's default settings.<br>I haven't change any setup. <br><br><div class="gmail_quote">2011/11/2 Jeremy McSpadden <span dir="ltr"><<a href="mailto:jeremy@fluxlabs.net">jeremy@fluxlabs.net</a>></span><br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">
<div style="word-wrap:break-word">deny<span style="white-space:pre-wrap">        </span>\.reg$<span style="white-space:pre-wrap">        </span> <span style="white-space:pre-wrap">        </span>Windows registry attack<div>deny<span style="white-space:pre-wrap">        </span>\.cur$<span style="white-space:pre-wrap">                </span>Cursor File</div>
<div><font face="Calibri, sans-serif"><span style="font-size:13px"> </span></font></div><div><font face="Calibri, sans-serif"><span style="font-size:13px">in filename.rules.conf </span></font></div><div><div class="im"><span style="font-family:Calibri, sans-serif;font-size:13px">--</span><div>
<div style="margin-top:0in;margin-right:0in;margin-bottom:0.0001pt;margin-left:0in;font-size:12pt;font-family:'Times New Roman', serif"><span style="font-size:10pt;color:black;font-family:Calibri, sans-serif">Jeremy McSpadden<u></u><u></u></span></div>
<div style="margin-top:0in;margin-right:0in;margin-bottom:0.0001pt;margin-left:0in;font-size:12pt;font-family:'Times New Roman', serif"><span style="font-size:10pt;color:black;font-family:Calibri, sans-serif">Flux Labs, Inc<u></u><u></u></span></div>
<div style="margin-top:0in;margin-right:0in;margin-bottom:0.0001pt;margin-left:0in;font-size:12pt;font-family:'Times New Roman', serif"><span style="font-size:10pt;color:rgb(31, 73, 125);font-family:Calibri, sans-serif"><a href="http://www.fluxlabs.net/" style="color:blue;text-decoration:underline" target="_blank"><span style="color:rgb(31, 73, 125)">http://www.fluxlabs.net</span></a><span onmouseout="cancel = false; window.setTimeout(WRCHideContent, 1000); clearTimeout(showTimer);" onmouseover=" var self = this; showTimer = window.setTimeout(function(){WRCShowContent({'rating':{'value':-1,'weight':-1},'flags':{},'single':false,'ttl':3600,'expireTime':'20111102120337'}, self.className)},600);" class="wrc0" style="padding-right: 16px; width: 16px; height: 16px;"></span><br>
Endless Solutions<u></u><u></u></span></div><div style="margin-top:0in;margin-right:0in;margin-bottom:0.0001pt;margin-left:0in;font-size:12pt;font-family:'Times New Roman', serif"><b><span style="font-size:10pt;color:rgb(125, 125, 125);font-family:Calibri, sans-serif">Office</span></b><span style="font-size:10pt;color:rgb(125, 125, 125);font-family:Calibri, sans-serif"> : 850-588-4626</span><span style="font-size:11pt;color:rgb(125, 125, 125);font-family:Calibri, sans-serif"><u></u><u></u></span></div>
<div style="margin-top:0in;margin-right:0in;margin-bottom:0.0001pt;margin-left:0in;font-size:12pt;font-family:'Times New Roman', serif"><b><span style="font-size:10pt;color:rgb(125, 125, 125);font-family:Calibri, sans-serif">Cell</span></b><span style="font-size:10pt;color:rgb(125, 125, 125);font-family:Calibri, sans-serif"> : 850-890-2543<br>
<b>Fax</b> : 850-254-2955</span></div>
</div>
<br></div><div><div class="h5"><div><div>On Nov 1, 2011, at 10:04 PM, 吳汝剛 wrote:</div><br><blockquote type="cite">It's my setup.<br># Do you want to scan the messages for potentially dangerous content?<br># Setting this to "no" will disable all the content-based checks except<br>
# Virus Scanning, Allow Partial Messages and Allow External Message Bodies.<br>
# This can also be the filename of a ruleset.<br>Dangerous Content Scanning = yes<br><br>I have set it to yes<br><br><div class="gmail_quote">2011/11/2 Jeremy McSpadden <span><<a href="mailto:jeremy@fluxlabs.net" target="_blank">jeremy@fluxlabs.net</a>></span><br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div style="word-wrap:break-word">Can you verify Dangerous Content Scanning is set to yes ?<div><br><div>
<span style="border-collapse:separate;color:rgb(0, 0, 0);font-family:Helvetica;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;line-height:normal;text-align:-webkit-auto;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;font-size:medium"><div style="margin-top:0in;margin-right:0in;margin-bottom:0.0001pt;margin-left:0in;font-size:12pt;font-family:'Times New Roman', serif">
<span style="font-size:10pt;color:black;font-family:Calibri, sans-serif">--<u></u><u></u></span></div><div style="margin-top:0in;margin-right:0in;margin-bottom:0.0001pt;margin-left:0in;font-size:12pt;font-family:'Times New Roman', serif">
<span style="font-size:10pt;color:black;font-family:Calibri, sans-serif">Jeremy McSpadden<u></u><u></u></span></div><div style="margin-top:0in;margin-right:0in;margin-bottom:0.0001pt;margin-left:0in;font-size:12pt;font-family:'Times New Roman', serif">
<span style="font-size:10pt;color:black;font-family:Calibri, sans-serif">Flux Labs, Inc<u></u><u></u></span></div><div style="margin-top:0in;margin-right:0in;margin-bottom:0.0001pt;margin-left:0in;font-size:12pt;font-family:'Times New Roman', serif">
<span style="font-size:10pt;color:rgb(31, 73, 125);font-family:Calibri, sans-serif"><a href="http://www.fluxlabs.net/" style="color:blue;text-decoration:underline" target="_blank"><span style="color:rgb(31, 73, 125)">http://www.fluxlabs.net</span></a><span onmouseout="cancel = false; window.setTimeout(WRCHideContent, 1000); clearTimeout(showTimer);" onmouseover=" var self = this; showTimer = window.setTimeout(function(){WRCShowContent({'rating':{'value':-1,'weight':-1},'flags':{},'single':false,'ttl':3600,'expireTime':'20111102120337'}, self.className)},600);" class="wrc0" style="padding-right: 16px; width: 16px; height: 16px;"></span><span style="padding-right:16px;width:16px;min-height:16px"></span><br>
Endless Solutions<u></u><u></u></span></div><div style="margin-top:0in;margin-right:0in;margin-bottom:0.0001pt;margin-left:0in;font-size:12pt;font-family:'Times New Roman', serif"><b><span style="font-size:10pt;color:rgb(125, 125, 125);font-family:Calibri, sans-serif">Office</span></b><span style="font-size:10pt;color:rgb(125, 125, 125);font-family:Calibri, sans-serif"> : 850-588-4626</span><span style="font-size:11pt;color:rgb(125, 125, 125);font-family:Calibri, sans-serif"><u></u><u></u></span></div>
<div style="margin-top:0in;margin-right:0in;margin-bottom:0.0001pt;margin-left:0in;font-size:12pt;font-family:'Times New Roman', serif"><b><span style="font-size:10pt;color:rgb(125, 125, 125);font-family:Calibri, sans-serif">Cell</span></b><span style="font-size:10pt;color:rgb(125, 125, 125);font-family:Calibri, sans-serif"> : 850-890-2543<br>
<b>Fax</b> : 850-254-2955</span></div></span>
</div>
<br><div><div><div><div>On Nov 1, 2011, at 9:43 PM, 吳汝剛 wrote:</div><br></div></div><blockquote><div><div>Hello,<br>I test MailScanner 4.84.3-1 on Fedora 13 and Fedora 14.<br>It's can't deny any attachment at filetname.rules.conf list.<br>
Example:<br>The default set deny .cur and .reg attachment.<br>But when I send mail with .cur or .reg attachment.<br>
It's always can received this mail.<br>And I check maillog.<br>It's no show any error message.<br>Please check it.<br>I list fedora 13 and 14 some information.<br><br>[root@tw14 MailScanner]# MailScanner -v<br>Running on<br>
Linux <a href="http://tw14.linguitronics.com/" target="_blank">tw14.linguitronics.com</a><span onmouseout="cancel = false; window.setTimeout(WRCHideContent, 1000); clearTimeout(showTimer);" onmouseover=" var self = this; showTimer = window.setTimeout(function(){WRCShowContent({'rating':{'value':-1,'weight':-1},'flags':{},'single':false,'ttl':3600,'expireTime':'20111102114409'}, self.className)},600);" class="wrc0" style="padding-right: 16px; width: 16px; height: 16px;"></span><span style="padding-right:16px;width:16px;min-height:16px"></span> <a>2.6.35.13-91</a>.fc14.i686 #1 SMP Tue May 3 13:36:36 UTC 2011 i686 i686 i386 GNU/Linux<br>
This is Fedora release 14 (Laughlin)<br>This is Perl version 5.012003 (5.12.3)<br>
<br>This is MailScanner version 4.84.3<br><br>[root@tw ~]# MailScanner -v<br>Running on<br>Linux <a href="http://tw.linguitronics.com/" target="_blank">tw.linguitronics.com</a><span onmouseout="cancel = false; window.setTimeout(WRCHideContent, 1000); clearTimeout(showTimer);" onmouseover=" var self = this; showTimer = window.setTimeout(function(){WRCShowContent({'rating':{'value':-1,'weight':-1},'flags':{},'single':false,'ttl':3600,'expireTime':'20111102114409'}, self.className)},600);" class="wrc0" style="padding-right: 16px; width: 16px; height: 16px;"></span><span style="padding-right:16px;width:16px;min-height:16px"></span> 2.6.34.9-69.fc13.i686 #1 SMP Tue May 3 09:20:30 UTC 2011 i686 i686 i386 GNU/Linux<br>
This is Fedora release 13 (Goddard)<br>This is Perl version 5.010001 (5.10.1)<br><br>This is MailScanner version 4.84.3<br><br></div></div><span><font color="#888888">
-- <br>MailScanner mailing list<br><a href="mailto:mailscanner@lists.mailscanner.info" target="_blank">mailscanner@lists.mailscanner.info</a><br><a href="http://lists.mailscanner.info/mailman/listinfo/mailscanner" target="_blank">http://lists.mailscanner.info/mailman/listinfo/mailscanner</a><span onmouseout="cancel = false; window.setTimeout(WRCHideContent, 1000); clearTimeout(showTimer);" onmouseover=" var self = this; showTimer = window.setTimeout(function(){WRCShowContent({'rating':{},'flags':{},'single':true,'ttl':3600,'expireTime':'20111102115825'}, self.className)},600);" class="wrc0" style="padding-right: 16px; width: 16px; height: 16px;"></span><span style="padding-right:16px;width:16px;min-height:16px"></span><br>
<br>Before posting, read <a href="http://wiki.mailscanner.info/posting" target="_blank">http://wiki.mailscanner.info/posting</a><span onmouseout="cancel = false; window.setTimeout(WRCHideContent, 1000); clearTimeout(showTimer);" onmouseover=" var self = this; showTimer = window.setTimeout(function(){WRCShowContent({'rating':{'value':-1,'weight':-1},'flags':{},'single':false,'ttl':3600,'expireTime':'20111102113246'}, self.className)},600);" class="wrc0" style="padding-right: 16px; width: 16px; height: 16px;"></span><span style="padding-right:16px;width:16px;min-height:16px"></span><br>
<br>Support MailScanner development - buy the book off the website! <br></font></span></blockquote></div><br></div>
</div>
<br>--<br>
MailScanner mailing list<br>
<a href="mailto:mailscanner@lists.mailscanner.info" target="_blank">mailscanner@lists.mailscanner.info</a><br>
<a href="http://lists.mailscanner.info/mailman/listinfo/mailscanner" target="_blank">http://lists.mailscanner.info/mailman/listinfo/mailscanner</a><span onmouseout="cancel = false; window.setTimeout(WRCHideContent, 1000); clearTimeout(showTimer);" onmouseover=" var self = this; showTimer = window.setTimeout(function(){WRCShowContent({'rating':{},'flags':{},'single':true,'ttl':3600,'expireTime':'20111102115825'}, self.className)},600);" class="wrc0" style="padding-right: 16px; width: 16px; height: 16px;"></span><span style="padding-right:16px;width:16px;min-height:16px"></span><br>
<br>
Before posting, read <a href="http://wiki.mailscanner.info/posting" target="_blank">http://wiki.mailscanner.info/posting</a><span onmouseout="cancel = false; window.setTimeout(WRCHideContent, 1000); clearTimeout(showTimer);" onmouseover=" var self = this; showTimer = window.setTimeout(function(){WRCShowContent({'rating':{'value':-1,'weight':-1},'flags':{},'single':false,'ttl':3600,'expireTime':'20111102113246'}, self.className)},600);" class="wrc0" style="padding-right: 16px; width: 16px; height: 16px;"></span><span style="padding-right:16px;width:16px;min-height:16px"></span><br>
<br>
Support MailScanner development - buy the book off the website!<br>
<br></blockquote></div><br><br><br>-- <br>吳汝剛<br>個人網頁 <a href="http://pc.aspa.idv.tw/" target="_blank">http://pc.aspa.idv.tw</a><span onmouseout="cancel = false; window.setTimeout(WRCHideContent, 1000); clearTimeout(showTimer);" onmouseover=" var self = this; showTimer = window.setTimeout(function(){WRCShowContent({'rating':{'value':-1,'weight':-1},'flags':{},'single':false,'ttl':3600,'expireTime':'20111102113316'}, self.className)},600);" class="wrc0" style="padding-right: 16px; width: 16px; height: 16px;"></span><span style="padding-right:16px;width:16px;min-height:16px"></span><br>
個人Blog <a href="http://ak6783.blogspot.com/" target="_blank">http://ak6783.blogspot.com/</a><span onmouseout="cancel = false; window.setTimeout(WRCHideContent, 1000); clearTimeout(showTimer);" onmouseover=" var self = this; showTimer = window.setTimeout(function(){WRCShowContent({'rating':{'value':-1,'weight':0},'flags':{},'single':true,'ttl':3600,'expireTime':'20111102104515'}, self.className)},600);" class="wrc0" style="padding-right: 16px; width: 16px; height: 16px;"></span><span style="padding-right:16px;width:16px;min-height:16px"></span><br>
Twitter <a href="http://twitter.com/akong77" target="_blank">http://twitter.com/akong77</a><span onmouseout="cancel = false; window.setTimeout(WRCHideContent, 1000); clearTimeout(showTimer);" onmouseover=" var self = this; showTimer = window.setTimeout(function(){WRCShowContent({'rating':{'value':95,'weight':100},'flags':{'social':1},'single':false,'ttl':3600,'expireTime':'20111102113316'}, self.className)},600);" class="wrc13" style="padding-right: 16px; width: 16px; height: 16px;"></span><span style="padding-right:16px;width:16px;min-height:16px"></span><br>
Plurk <a href="http://www.plurk.com/akong77" target="_blank">http://www.plurk.com/akong77</a><span onmouseout="cancel = false; window.setTimeout(WRCHideContent, 1000); clearTimeout(showTimer);" onmouseover=" var self = this; showTimer = window.setTimeout(function(){WRCShowContent({'rating':{'value':96,'weight':100},'flags':{'social':1},'single':true,'ttl':3600,'expireTime':'20111102102040'}, self.className)},600);" class="wrc13" style="padding-right: 16px; width: 16px; height: 16px;"></span><span style="padding-right:16px;width:16px;min-height:16px"></span><br>
Facebook <a href="http://www.facebook.com/akong77" target="_blank">http://www.facebook.com/akong77</a><span onmouseout="cancel = false; window.setTimeout(WRCHideContent, 1000); clearTimeout(showTimer);" onmouseover=" var self = this; showTimer = window.setTimeout(function(){WRCShowContent({'rating':{'value':89,'weight':100},'flags':{},'single':true,'ttl':3600,'expireTime':'20111102102041'}, self.className)},600);" class="wrc13" style="padding-right: 16px; width: 16px; height: 16px;"></span><span style="padding-right:16px;width:16px;min-height:16px"></span><br>
Email (1) : <a href="mailto:akong@aspa.idv.tw" target="_blank">akong@aspa.idv.tw</a><br>Email (2) : <a href="mailto:ak6783@gmail.com" target="_blank">ak6783@gmail.com</a><br>手機 : <a href="tel:0960599655" value="+886960599655" target="_blank">0960599655</a><span style="padding-right:16px;width:16px;min-height:16px"></span><span style="padding-right:16px;width:16px;min-height:16px"></span><span style="padding-right:16px;width:16px;min-height:16px"></span><span style="padding-right:16px;width:16px;min-height:16px"></span><span style="padding-right:16px;width:16px;min-height:16px"></span><div>
<div><div>WebRep</div></div><img src=""><div>Overall rating</div><img src=""><div></div><div></div><div><img src="" height="30" width="30"><img src="" height="30" width="30"><img src="" height="30" width="30"><img src="" height="30" width="30"><img src="" height="30" width="30"></div>
<div><img src="" height="30" width="30"><img src="" height="30" width="30"><img src="" height="30" width="30"><img src="" height="30" width="30"><img src="" height="30" width="30"></div><img src=""><div> </div></div><br>
-- <br>MailScanner mailing list<br><a href="mailto:mailscanner@lists.mailscanner.info" target="_blank">mailscanner@lists.mailscanner.info</a><br><a href="http://lists.mailscanner.info/mailman/listinfo/mailscanner" target="_blank">http://lists.mailscanner.info/mailman/listinfo/mailscanner</a><span onmouseout="cancel = false; window.setTimeout(WRCHideContent, 1000); clearTimeout(showTimer);" onmouseover=" var self = this; showTimer = window.setTimeout(function(){WRCShowContent({'rating':{},'flags':{},'single':true,'ttl':3600,'expireTime':'20111102115825'}, self.className)},600);" class="wrc0" style="padding-right: 16px; width: 16px; height: 16px;"></span><br>
<br>Before posting, read <a href="http://wiki.mailscanner.info/posting" target="_blank">http://wiki.mailscanner.info/posting</a><span onmouseout="cancel = false; window.setTimeout(WRCHideContent, 1000); clearTimeout(showTimer);" onmouseover=" var self = this; showTimer = window.setTimeout(function(){WRCShowContent({'rating':{'value':-1,'weight':-1},'flags':{},'single':false,'ttl':3600,'expireTime':'20111102113246'}, self.className)},600);" class="wrc0" style="padding-right: 16px; width: 16px; height: 16px;"></span><br>
<br>Support MailScanner development - buy the book off the website! <br></blockquote></div><br></div></div></div>
</div>
<br>--<br>
MailScanner mailing list<br>
<a href="mailto:mailscanner@lists.mailscanner.info">mailscanner@lists.mailscanner.info</a><br>
<a href="http://lists.mailscanner.info/mailman/listinfo/mailscanner" target="_blank">http://lists.mailscanner.info/mailman/listinfo/mailscanner</a><span onmouseout="cancel = false; window.setTimeout(WRCHideContent, 1000); clearTimeout(showTimer);" onmouseover=" var self = this; showTimer = window.setTimeout(function(){WRCShowContent({'rating':{},'flags':{},'single':true,'ttl':3600,'expireTime':'20111102115825'}, self.className)},600);" class="wrc0" style="padding-right: 16px; width: 16px; height: 16px;"></span><br>
<br>
Before posting, read <a href="http://wiki.mailscanner.info/posting" target="_blank">http://wiki.mailscanner.info/posting</a><span onmouseout="cancel = false; window.setTimeout(WRCHideContent, 1000); clearTimeout(showTimer);" onmouseover=" var self = this; showTimer = window.setTimeout(function(){WRCShowContent({'rating':{'value':-1,'weight':-1},'flags':{},'single':false,'ttl':3600,'expireTime':'20111102113246'}, self.className)},600);" class="wrc0" style="padding-right: 16px; width: 16px; height: 16px;"></span><br>
<br>
Support MailScanner development - buy the book off the website!<br>
<br></blockquote></div><br><br clear="all"><br>-- <br>吳汝剛<br>個人網頁 <a href="http://pc.aspa.idv.tw/" target="_blank">http://pc.aspa.idv.tw</a><span onmouseout="cancel = false; window.setTimeout(WRCHideContent, 1000); clearTimeout(showTimer);" onmouseover=" var self = this; showTimer = window.setTimeout(function(){WRCShowContent({'rating':{'value':-1,'weight':-1},'flags':{},'single':false,'ttl':3600,'expireTime':'20111102113316'}, self.className)},600);" class="wrc0" style="padding-right: 16px; width: 16px; height: 16px;"></span><br>
個人Blog <a href="http://ak6783.blogspot.com/" target="_blank">http://ak6783.blogspot.com/</a><span onmouseout="cancel = false; window.setTimeout(WRCHideContent, 1000); clearTimeout(showTimer);" onmouseover=" var self = this; showTimer = window.setTimeout(function(){WRCShowContent({'rating':{'value':-1,'weight':0},'flags':{},'single':true,'ttl':3600,'expireTime':'20111102104515'}, self.className)},600);" class="wrc0" style="padding-right: 16px; width: 16px; height: 16px;"></span><br>
Twitter <a href="http://twitter.com/akong77" target="_blank">http://twitter.com/akong77</a><span onmouseout="cancel = false; window.setTimeout(WRCHideContent, 1000); clearTimeout(showTimer);" onmouseover=" var self = this; showTimer = window.setTimeout(function(){WRCShowContent({'rating':{'value':95,'weight':100},'flags':{'social':1},'single':false,'ttl':3600,'expireTime':'20111102113316'}, self.className)},600);" class="wrc13" style="padding-right: 16px; width: 16px; height: 16px;"></span><br>
Plurk <a href="http://www.plurk.com/akong77" target="_blank">http://www.plurk.com/akong77</a><span onmouseout="cancel = false; window.setTimeout(WRCHideContent, 1000); clearTimeout(showTimer);" onmouseover=" var self = this; showTimer = window.setTimeout(function(){WRCShowContent({'rating':{'value':96,'weight':100},'flags':{'social':1},'single':true,'ttl':3600,'expireTime':'20111102102040'}, self.className)},600);" class="wrc13" style="padding-right: 16px; width: 16px; height: 16px;"></span><br>
Facebook <a href="http://www.facebook.com/akong77" target="_blank">http://www.facebook.com/akong77</a><span onmouseout="cancel = false; window.setTimeout(WRCHideContent, 1000); clearTimeout(showTimer);" onmouseover=" var self = this; showTimer = window.setTimeout(function(){WRCShowContent({'rating':{'value':89,'weight':100},'flags':{},'single':true,'ttl':3600,'expireTime':'20111102102041'}, self.className)},600);" class="wrc13" style="padding-right: 16px; width: 16px; height: 16px;"></span><br>
Email (1) : <a href="mailto:akong@aspa.idv.tw" target="_blank">akong@aspa.idv.tw</a><br>Email (2) : <a href="mailto:ak6783@gmail.com" target="_blank">ak6783@gmail.com</a><br>手機 : 0960599655<span style="padding-right:16px;width:16px;height:16px"></span><span style="padding-right:16px;width:16px;height:16px"></span><span style="padding-right:16px;width:16px;height:16px"></span><span style="padding-right:16px;width:16px;height:16px"></span><span style="padding-right:16px;width:16px;height:16px"></span><div>
<div><div>WebRep</div></div><img src=""><div>Overall rating</div><img src=""><div></div><div></div><div><img src="" height="30" width="30"><img src="" height="30" width="30"><img src="" height="30" width="30"><img src="" height="30" width="30"><img src="" height="30" width="30"></div>
<div><img src="" height="30" width="30"><img src="" height="30" width="30"><img src="" height="30" width="30"><img src="" height="30" width="30"><img src="" height="30" width="30"></div><img src=""><div> </div></div><br>