<html><head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">Filename Rules = %etc-dir%/filename.rules.conf<div><br><div apple-content-edited="true">
<div style="margin-top: 0in; margin-right: 0in; margin-bottom: 0.0001pt; margin-left: 0in; font-size: 12pt; font-family: 'Times New Roman', serif; "><span style="font-size: 10pt; color: black; font-family: Calibri, sans-serif; ">--<o:p></o:p></span></div><div style="margin-top: 0in; margin-right: 0in; margin-bottom: 0.0001pt; margin-left: 0in; font-size: 12pt; font-family: 'Times New Roman', serif; "><span style="font-size: 10pt; color: black; font-family: Calibri, sans-serif; ">Jeremy McSpadden<o:p></o:p></span></div><div style="margin-top: 0in; margin-right: 0in; margin-bottom: 0.0001pt; margin-left: 0in; font-size: 12pt; font-family: 'Times New Roman', serif; "><span style="font-size: 10pt; color: black; font-family: Calibri, sans-serif; ">Flux Labs, Inc<o:p></o:p></span></div><div style="margin-top: 0in; margin-right: 0in; margin-bottom: 0.0001pt; margin-left: 0in; font-size: 12pt; font-family: 'Times New Roman', serif; "><span style="font-size: 10pt; color: rgb(31, 73, 125); font-family: Calibri, sans-serif; "><a href="http://www.fluxlabs.net/" style="color: blue; text-decoration: underline; "><span style="color: rgb(31, 73, 125); ">http://www.fluxlabs.net</span></a><br>Endless Solutions<o:p></o:p></span></div><div style="margin-top: 0in; margin-right: 0in; margin-bottom: 0.0001pt; margin-left: 0in; font-size: 12pt; font-family: 'Times New Roman', serif; "><b><span style="font-size: 10pt; color: rgb(125, 125, 125); font-family: Calibri, sans-serif; ">Office</span></b><span style="font-size: 10pt; color: rgb(125, 125, 125); font-family: Calibri, sans-serif; "> : 850-588-4626</span><span style="font-size: 11pt; color: rgb(125, 125, 125); font-family: Calibri, sans-serif; "><o:p></o:p></span></div><div style="margin-top: 0in; margin-right: 0in; margin-bottom: 0.0001pt; margin-left: 0in; font-size: 12pt; font-family: 'Times New Roman', serif; "><b><span style="font-size: 10pt; color: rgb(125, 125, 125); font-family: Calibri, sans-serif; ">Cell</span></b><span style="font-size: 10pt; color: rgb(125, 125, 125); font-family: Calibri, sans-serif; "> : 850-890-2543<br><b>Fax</b> : 850-254-2955</span></div>
</div>
<br><div><div>On Nov 1, 2011, at 10:22 PM, 吳汝剛 wrote:</div><br class="Apple-interchange-newline"><blockquote type="cite">It's my filename.rules.conf<br>deny \.cur$ Windows cursor file security vulnerability Possible buffer overflow in Windows<br>deny \.reg$ Possible Windows registry attack Windows registry entries are very dangerous in email<br>
It's default settings.<br>I haven't change any setup. <br><br><div class="gmail_quote">2011/11/2 Jeremy McSpadden <span><<a href="mailto:jeremy@fluxlabs.net">jeremy@fluxlabs.net</a>></span><br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">
<div style="word-wrap:break-word">deny<span style="white-space:pre-wrap"> </span>\.reg$<span style="white-space:pre-wrap"> </span> <span style="white-space:pre-wrap"> </span>Windows registry attack<div>deny<span style="white-space:pre-wrap"> </span>\.cur$<span style="white-space:pre-wrap"> </span>Cursor File</div>
<div><font face="Calibri, sans-serif"><span style="font-size:13px"> </span></font></div><div><font face="Calibri, sans-serif"><span style="font-size:13px">in filename.rules.conf </span></font></div><div><div class="im"><span style="font-family:Calibri, sans-serif;font-size:13px">--</span><div>
<div style="margin-top:0in;margin-right:0in;margin-bottom:0.0001pt;margin-left:0in;font-size:12pt;font-family:'Times New Roman', serif"><span style="font-size:10pt;color:black;font-family:Calibri, sans-serif">Jeremy McSpadden<u></u><u></u></span></div>
<div style="margin-top:0in;margin-right:0in;margin-bottom:0.0001pt;margin-left:0in;font-size:12pt;font-family:'Times New Roman', serif"><span style="font-size:10pt;color:black;font-family:Calibri, sans-serif">Flux Labs, Inc<u></u><u></u></span></div>
<div style="margin-top:0in;margin-right:0in;margin-bottom:0.0001pt;margin-left:0in;font-size:12pt;font-family:'Times New Roman', serif"><span style="font-size:10pt;color:rgb(31, 73, 125);font-family:Calibri, sans-serif"><a href="http://www.fluxlabs.net/" style="color:blue;text-decoration:underline"><span style="color:rgb(31, 73, 125)">http://www.fluxlabs.net</span></a><span class="wrc0" style="padding-right: 16px; width: 16px; height: 16px;"></span><br>
Endless Solutions<u></u><u></u></span></div><div style="margin-top:0in;margin-right:0in;margin-bottom:0.0001pt;margin-left:0in;font-size:12pt;font-family:'Times New Roman', serif"><b><span style="font-size:10pt;color:rgb(125, 125, 125);font-family:Calibri, sans-serif">Office</span></b><span style="font-size:10pt;color:rgb(125, 125, 125);font-family:Calibri, sans-serif"> : 850-588-4626</span><span style="font-size:11pt;color:rgb(125, 125, 125);font-family:Calibri, sans-serif"><u></u><u></u></span></div>
<div style="margin-top:0in;margin-right:0in;margin-bottom:0.0001pt;margin-left:0in;font-size:12pt;font-family:'Times New Roman', serif"><b><span style="font-size:10pt;color:rgb(125, 125, 125);font-family:Calibri, sans-serif">Cell</span></b><span style="font-size:10pt;color:rgb(125, 125, 125);font-family:Calibri, sans-serif"> : 850-890-2543<br>
<b>Fax</b> : 850-254-2955</span></div>
</div>
<br></div><div><div class="h5"><div><div>On Nov 1, 2011, at 10:04 PM, 吳汝剛 wrote:</div><br><blockquote>It's my setup.<br># Do you want to scan the messages for potentially dangerous content?<br># Setting this to "no" will disable all the content-based checks except<br>
# Virus Scanning, Allow Partial Messages and Allow External Message Bodies.<br>
# This can also be the filename of a ruleset.<br>Dangerous Content Scanning = yes<br><br>I have set it to yes<br><br><div class="gmail_quote">2011/11/2 Jeremy McSpadden <span><<a href="mailto:jeremy@fluxlabs.net">jeremy@fluxlabs.net</a>></span><br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div style="word-wrap:break-word">Can you verify Dangerous Content Scanning is set to yes ?<div><br><div>
<span style="border-collapse:separate;color:rgb(0, 0, 0);font-family:Helvetica;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;line-height:normal;text-align:-webkit-auto;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;font-size:medium"><div style="margin-top:0in;margin-right:0in;margin-bottom:0.0001pt;margin-left:0in;font-size:12pt;font-family:'Times New Roman', serif">
<span style="font-size:10pt;color:black;font-family:Calibri, sans-serif">--<u></u><u></u></span></div><div style="margin-top:0in;margin-right:0in;margin-bottom:0.0001pt;margin-left:0in;font-size:12pt;font-family:'Times New Roman', serif">
<span style="font-size:10pt;color:black;font-family:Calibri, sans-serif">Jeremy McSpadden<u></u><u></u></span></div><div style="margin-top:0in;margin-right:0in;margin-bottom:0.0001pt;margin-left:0in;font-size:12pt;font-family:'Times New Roman', serif">
<span style="font-size:10pt;color:black;font-family:Calibri, sans-serif">Flux Labs, Inc<u></u><u></u></span></div><div style="margin-top:0in;margin-right:0in;margin-bottom:0.0001pt;margin-left:0in;font-size:12pt;font-family:'Times New Roman', serif">
<span style="font-size:10pt;color:rgb(31, 73, 125);font-family:Calibri, sans-serif"><a href="http://www.fluxlabs.net/" style="color:blue;text-decoration:underline"><span style="color:rgb(31, 73, 125)">http://www.fluxlabs.net</span></a><span class="wrc0" style="padding-right: 16px; width: 16px; height: 16px;"></span><span style="padding-right:16px;width:16px;min-height:16px"></span><br>
Endless Solutions<u></u><u></u></span></div><div style="margin-top:0in;margin-right:0in;margin-bottom:0.0001pt;margin-left:0in;font-size:12pt;font-family:'Times New Roman', serif"><b><span style="font-size:10pt;color:rgb(125, 125, 125);font-family:Calibri, sans-serif">Office</span></b><span style="font-size:10pt;color:rgb(125, 125, 125);font-family:Calibri, sans-serif"> : 850-588-4626</span><span style="font-size:11pt;color:rgb(125, 125, 125);font-family:Calibri, sans-serif"><u></u><u></u></span></div>
<div style="margin-top:0in;margin-right:0in;margin-bottom:0.0001pt;margin-left:0in;font-size:12pt;font-family:'Times New Roman', serif"><b><span style="font-size:10pt;color:rgb(125, 125, 125);font-family:Calibri, sans-serif">Cell</span></b><span style="font-size:10pt;color:rgb(125, 125, 125);font-family:Calibri, sans-serif"> : 850-890-2543<br>
<b>Fax</b> : 850-254-2955</span></div></span>
</div>
<br><div><div><div><div>On Nov 1, 2011, at 9:43 PM, 吳汝剛 wrote:</div><br></div></div><blockquote><div><div>Hello,<br>I test MailScanner 4.84.3-1 on Fedora 13 and Fedora 14.<br>It's can't deny any attachment at filetname.rules.conf list.<br>
Example:<br>The default set deny .cur and .reg attachment.<br>But when I send mail with .cur or .reg attachment.<br>
It's always can received this mail.<br>And I check maillog.<br>It's no show any error message.<br>Please check it.<br>I list fedora 13 and 14 some information.<br><br>[root@tw14 MailScanner]# MailScanner -v<br>Running on<br>
Linux <a href="http://tw14.linguitronics.com/">tw14.linguitronics.com</a><span class="wrc0" style="padding-right: 16px; width: 16px; height: 16px;"></span><span style="padding-right:16px;width:16px;min-height:16px"></span> <a>2.6.35.13-91</a>.fc14.i686 #1 SMP Tue May 3 13:36:36 UTC 2011 i686 i686 i386 GNU/Linux<br>
This is Fedora release 14 (Laughlin)<br>This is Perl version 5.012003 (5.12.3)<br>
<br>This is MailScanner version 4.84.3<br><br>[root@tw ~]# MailScanner -v<br>Running on<br>Linux <a href="http://tw.linguitronics.com/">tw.linguitronics.com</a><span class="wrc0" style="padding-right: 16px; width: 16px; height: 16px;"></span><span style="padding-right:16px;width:16px;min-height:16px"></span> 2.6.34.9-69.fc13.i686 #1 SMP Tue May 3 09:20:30 UTC 2011 i686 i686 i386 GNU/Linux<br>
This is Fedora release 13 (Goddard)<br>This is Perl version 5.010001 (5.10.1)<br><br>This is MailScanner version 4.84.3<br><br></div></div><span><font color="#888888">
-- <br>MailScanner mailing list<br><a href="mailto:mailscanner@lists.mailscanner.info">mailscanner@lists.mailscanner.info</a><br><a href="http://lists.mailscanner.info/mailman/listinfo/mailscanner">http://lists.mailscanner.info/mailman/listinfo/mailscanner</a><span class="wrc0" style="padding-right: 16px; width: 16px; height: 16px;"></span><span style="padding-right:16px;width:16px;min-height:16px"></span><br>
<br>Before posting, read <a href="http://wiki.mailscanner.info/posting">http://wiki.mailscanner.info/posting</a><span class="wrc0" style="padding-right: 16px; width: 16px; height: 16px;"></span><span style="padding-right:16px;width:16px;min-height:16px"></span><br>
<br>Support MailScanner development - buy the book off the website! <br></font></span></blockquote></div><br></div>
</div>
<br>--<br>
MailScanner mailing list<br>
<a href="mailto:mailscanner@lists.mailscanner.info">mailscanner@lists.mailscanner.info</a><br>
<a href="http://lists.mailscanner.info/mailman/listinfo/mailscanner">http://lists.mailscanner.info/mailman/listinfo/mailscanner</a><span class="wrc0" style="padding-right: 16px; width: 16px; height: 16px;"></span><span style="padding-right:16px;width:16px;min-height:16px"></span><br>
<br>
Before posting, read <a href="http://wiki.mailscanner.info/posting">http://wiki.mailscanner.info/posting</a><span class="wrc0" style="padding-right: 16px; width: 16px; height: 16px;"></span><span style="padding-right:16px;width:16px;min-height:16px"></span><br>
<br>
Support MailScanner development - buy the book off the website!<br>
<br></blockquote></div><br><br><br>-- <br>吳汝剛<br>個人網頁 <a href="http://pc.aspa.idv.tw/">http://pc.aspa.idv.tw</a><span class="wrc0" style="padding-right: 16px; width: 16px; height: 16px;"></span><span style="padding-right:16px;width:16px;min-height:16px"></span><br>
個人Blog <a href="http://ak6783.blogspot.com/">http://ak6783.blogspot.com/</a><span class="wrc0" style="padding-right: 16px; width: 16px; height: 16px;"></span><span style="padding-right:16px;width:16px;min-height:16px"></span><br>
Twitter <a href="http://twitter.com/akong77">http://twitter.com/akong77</a><span class="wrc13" style="padding-right: 16px; width: 16px; height: 16px;"></span><span style="padding-right:16px;width:16px;min-height:16px"></span><br>
Plurk <a href="http://www.plurk.com/akong77">http://www.plurk.com/akong77</a><span class="wrc13" style="padding-right: 16px; width: 16px; height: 16px;"></span><span style="padding-right:16px;width:16px;min-height:16px"></span><br>
Facebook <a href="http://www.facebook.com/akong77">http://www.facebook.com/akong77</a><span class="wrc13" style="padding-right: 16px; width: 16px; height: 16px;"></span><span style="padding-right:16px;width:16px;min-height:16px"></span><br>
Email (1) : <a href="mailto:akong@aspa.idv.tw">akong@aspa.idv.tw</a><br>Email (2) : <a href="mailto:ak6783@gmail.com">ak6783@gmail.com</a><br>手機 : <a>0960599655</a><span style="padding-right:16px;width:16px;min-height:16px"></span><span style="padding-right:16px;width:16px;min-height:16px"></span><span style="padding-right:16px;width:16px;min-height:16px"></span><span style="padding-right:16px;width:16px;min-height:16px"></span><span style="padding-right:16px;width:16px;min-height:16px"></span><div>
<div><div>WebRep</div></div><img><div>Overall rating</div><img><div></div><div></div><div><img height="30" width="30"><img height="30" width="30"><img height="30" width="30"><img height="30" width="30"><img height="30" width="30"></div>
<div><img height="30" width="30"><img height="30" width="30"><img height="30" width="30"><img height="30" width="30"><img height="30" width="30"></div><img><div> </div></div><br>
-- <br>MailScanner mailing list<br><a href="mailto:mailscanner@lists.mailscanner.info">mailscanner@lists.mailscanner.info</a><br><a href="http://lists.mailscanner.info/mailman/listinfo/mailscanner">http://lists.mailscanner.info/mailman/listinfo/mailscanner</a><span class="wrc0" style="padding-right: 16px; width: 16px; height: 16px;"></span><br>
<br>Before posting, read <a href="http://wiki.mailscanner.info/posting">http://wiki.mailscanner.info/posting</a><span class="wrc0" style="padding-right: 16px; width: 16px; height: 16px;"></span><br>
<br>Support MailScanner development - buy the book off the website! <br></blockquote></div><br></div></div></div>
</div>
<br>--<br>
MailScanner mailing list<br>
<a href="mailto:mailscanner@lists.mailscanner.info">mailscanner@lists.mailscanner.info</a><br>
<a href="http://lists.mailscanner.info/mailman/listinfo/mailscanner">http://lists.mailscanner.info/mailman/listinfo/mailscanner</a><span class="wrc0" style="padding-right: 16px; width: 16px; height: 16px;"></span><br>
<br>
Before posting, read <a href="http://wiki.mailscanner.info/posting">http://wiki.mailscanner.info/posting</a><span class="wrc0" style="padding-right: 16px; width: 16px; height: 16px;"></span><br>
<br>
Support MailScanner development - buy the book off the website!<br>
<br></blockquote></div><br><br><br>-- <br>吳汝剛<br>個人網頁 <a href="http://pc.aspa.idv.tw/">http://pc.aspa.idv.tw</a><span class="wrc0" style="padding-right: 16px; width: 16px; height: 16px;"></span><br>
個人Blog <a href="http://ak6783.blogspot.com/">http://ak6783.blogspot.com/</a><span class="wrc0" style="padding-right: 16px; width: 16px; height: 16px;"></span><br>
Twitter <a href="http://twitter.com/akong77">http://twitter.com/akong77</a><span class="wrc13" style="padding-right: 16px; width: 16px; height: 16px;"></span><br>
Plurk <a href="http://www.plurk.com/akong77">http://www.plurk.com/akong77</a><span class="wrc13" style="padding-right: 16px; width: 16px; height: 16px;"></span><br>
Facebook <a href="http://www.facebook.com/akong77">http://www.facebook.com/akong77</a><span class="wrc13" style="padding-right: 16px; width: 16px; height: 16px;"></span><br>
Email (1) : <a href="mailto:akong@aspa.idv.tw">akong@aspa.idv.tw</a><br>Email (2) : <a href="mailto:ak6783@gmail.com">ak6783@gmail.com</a><br>手機 : 0960599655<span style="padding-right:16px;width:16px;height:16px"></span><span style="padding-right:16px;width:16px;height:16px"></span><span style="padding-right:16px;width:16px;height:16px"></span><span style="padding-right:16px;width:16px;height:16px"></span><span style="padding-right:16px;width:16px;height:16px"></span><div>
<div><div>WebRep</div></div><img><div>Overall rating</div><img><div></div><div></div><div><img height="30" width="30"><img height="30" width="30"><img height="30" width="30"><img height="30" width="30"><img height="30" width="30"></div>
<div><img height="30" width="30"><img height="30" width="30"><img height="30" width="30"><img height="30" width="30"><img height="30" width="30"></div><img><div> </div></div><br>
-- <br>MailScanner mailing list<br><a href="mailto:mailscanner@lists.mailscanner.info">mailscanner@lists.mailscanner.info</a><br>http://lists.mailscanner.info/mailman/listinfo/mailscanner<br><br>Before posting, read http://wiki.mailscanner.info/posting<br><br>Support MailScanner development - buy the book off the website! <br></blockquote></div><br></div>
</body></html>