<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman",serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p
{mso-style-priority:99;
mso-margin-top-alt:auto;
margin-right:0cm;
mso-margin-bottom-alt:auto;
margin-left:0cm;
font-size:12.0pt;
font-family:"Times New Roman",serif;}
span.EmailStyle18
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-GB" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">Have you checked your Virus Names Which Are Spam setting?<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<div style="border:none;border-left:solid blue 1.5pt;padding:0cm 0cm 0cm 4.0pt">
<div>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0cm 0cm 0cm">
<p class="MsoNormal"><b><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri",sans-serif">From:</span></b><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri",sans-serif"> mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner-bounces@lists.mailscanner.info]
<b>On Behalf Of </b>James Nelson<br>
<b>Sent:</b> 24 February 2015 13:23<br>
<b>To:</b> MailScanner discussion<br>
<b>Subject:</b> Re: Filename Restrictions Not working<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<p class="MsoNormal">Hi Glenn, I ran --lint as postfix and it does detect <a href="http://eicar.com">
eicar.com</a> as a blocked filetype, it just doesn't do anything about it during mail scanning. I had the thought that my rules files had permissions problems, but I made them readable for everyone just to be sure.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">I have the group as Apache as part of the configuration for MailWatch.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal" style="margin-bottom:12.0pt"><br>
On Feb 24, 2015, at 3:37 AM, Glenn Steen <<a href="mailto:glenn.steen@gmail.com">glenn.steen@gmail.com</a>> wrote:<o:p></o:p></p>
</div>
<blockquote style="margin-top:5.0pt;margin-bottom:5.0pt">
<div>
<p>I see you have run as user/group set to postfix/apache... When you've done your lint and debug runs, did you do them as postfix user or root?<br>
My guess is that the rule file for filenames might not be readable to the postfix user.<o:p></o:p></p>
<p>Cheers!<br>
-- <br>
-- Glenn <o:p></o:p></p>
<div>
<p class="MsoNormal">Den 23 feb 2015 22:09 skrev "James Nelson" <<a href="mailto:James.Nelson@vgt.net">James.Nelson@vgt.net</a>>:<o:p></o:p></p>
<blockquote style="border:none;border-left:solid #CCCCCC 1.0pt;padding:0cm 0cm 0cm 6.0pt;margin-left:4.8pt;margin-right:0cm">
<p class="MsoNormal"><br>
Sorry about that, I thought I set it to public. Try again :).<br>
<br>
Jerry, I'm building a Mailborder server now to test.<br>
<br>
<br>
“a rockpile ceases to be a rockpile the moment a single man contemplates it, bearing within him the image of a cathedral.”<br>
<br>
<br>
-----Original Message-----<br>
From: <a href="mailto:mailscanner-bounces@lists.mailscanner.info">mailscanner-bounces@lists.mailscanner.info</a> [mailto:<a href="mailto:mailscanner-bounces@lists.mailscanner.info">mailscanner-bounces@lists.mailscanner.info</a>] On Behalf Of Kevin Miller<br>
Sent: Monday, February 23, 2015 2:20 PM<br>
To: 'MailScanner discussion'<br>
Subject: RE: Filename Restrictions Not working<br>
<br>
It said this "This is a private paste. If you created this paste, please login to view it." I couldn't see it.<br>
<br>
If there's anything that needs to be munged (like your watermark), just edit that before posting and make it a public post.<br>
<br>
...Kevin<br>
--<br>
Kevin Miller<br>
Network/email Administrator, CBJ MIS Dept.<br>
155 South Seward Street<br>
Juneau, Alaska 99801<br>
Phone: <a href="tel:%28907%29%20586-0242">(907) 586-0242</a>, Fax: <a href="tel:%28907%29%20586-4500">
(907) 586-4500</a> Registered Linux User No: 307357<br>
<br>
<br>
> -----Original Message-----<br>
> From: <a href="mailto:mailscanner-bounces@lists.mailscanner.info">mailscanner-bounces@lists.mailscanner.info</a> [mailto:<a href="mailto:mailscanner-">mailscanner-</a><br>
> <a href="mailto:bounces@lists.mailscanner.info">bounces@lists.mailscanner.info</a>] On Behalf Of James Nelson<br>
> Sent: Monday, February 23, 2015 10:52 AM<br>
> To: MailScanner discussion<br>
> Subject: RE: Filename Restrictions Not working<br>
><br>
> Kevin,<br>
><br>
> Here's my complete MailScanner.conf:<br>
><br>
> <a href="http://pastebin.com/ci9dz8iL" target="_blank">http://pastebin.com/ci9dz8iL</a><br>
><br>
> Jerry:<br>
><br>
> I changed default to *@* this morning in the course of my, "did that<br>
> work? No, okay, how about this," but the result was the same regardless.<br>
><br>
> I'm not applying any configuration via conf.d at the moment...if I<br>
> were to do that, would it supersede anything in MailScanner.conf?<br>
><br>
><br>
><br>
> “a rockpile ceases to be a rockpile the moment a single man<br>
> contemplates it, bearing within him the image of a cathedral.”<br>
><br>
><br>
> -----Original Message-----<br>
> From: <a href="mailto:mailscanner-bounces@lists.mailscanner.info">mailscanner-bounces@lists.mailscanner.info</a> [mailto:<a href="mailto:mailscanner-">mailscanner-</a><br>
> <a href="mailto:bounces@lists.mailscanner.info">bounces@lists.mailscanner.info</a>] On Behalf Of Kevin Miller<br>
> Sent: Monday, February 23, 2015 12:50 PM<br>
> To: 'MailScanner discussion'<br>
> Subject: RE: Filename Restrictions Not working<br>
><br>
> Maybe you could post your MailScanner.conf to pastebin. I'm guessing<br>
> something in there is wonky.<br>
><br>
> ...Kevin<br>
> --<br>
> Kevin Miller<br>
> Network/email Administrator, CBJ MIS Dept.<br>
> 155 South Seward Street<br>
> Juneau, Alaska 99801<br>
> Phone: <a href="tel:%28907%29%20586-0242">(907) 586-0242</a>, Fax: <a href="tel:%28907%29%20586-4500">
(907) 586-4500</a> Registered Linux User No:<br>
> 307357<br>
><br>
><br>
> > -----Original Message-----<br>
> > From: <a href="mailto:mailscanner-bounces@lists.mailscanner.info">mailscanner-bounces@lists.mailscanner.info</a><br>
> > [mailto:<a href="mailto:mailscanner-">mailscanner-</a> <a href="mailto:bounces@lists.mailscanner.info">
bounces@lists.mailscanner.info</a>] On Behalf Of<br>
> > James Nelson<br>
> > Sent: Monday, February 23, 2015 9:26 AM<br>
> > To: MailScanner discussion<br>
> > Subject: RE: Filename Restrictions Not working<br>
> ><br>
> > Well, an interesting update...<br>
> ><br>
> > I changed up my approach, and pointed the Deny Filenames = in<br>
> > MailScanner.conf to %rules-dir%/filename_deny.rules , which is as<br>
> > follows:<br>
> ><br>
> > To: *@* \.ico$ \.ani \.cur$ \.hlp$ \.zip$ \.ceo$ \.cab$ \.reg$ \.chm$<br>
> > \.cnf$ \.hta$ \.ins$ \.jse?$ \.job$ \.lnk$ \.mat$ \.pif$ \.scf$<br>
> > \.sct$ \.shs$ \.shb$ \.vb[es]$ \.ws[cfh]$ \.xnk$ \.cer$ \.its$<br>
> > \.mau$ \.md[az]$ \.prf$ \.pst$ \.tmp$ \.vsmacros$ \.vs[stw]$ \.ws$<br>
> > \.com$ \.exe$ \.scr$ \.bat$ \.cmd$ \.cpl$ \.mhtml$ \.s{10,}<br>
> > \.[a-z][a-z0-9]{2,3}\s*\.[a-z0- 9]{3}$<br>
> ><br>
> > When running MailScanner --lint now, it DOES detect <a href="http://eicar.com" target="_blank">
eicar.com</a> as a<br>
> > blocked filetype. However, it's still allowing blocked filetypes<br>
> > through ?<br>
> ><br>
> ><br>
> ><br>
> ><br>
> > “a rockpile ceases to be a rockpile the moment a single man<br>
> > contemplates it, bearing within him the image of a cathedral.”<br>
> ><br>
> ><br>
> > -----Original Message-----<br>
> > From: <a href="mailto:mailscanner-bounces@lists.mailscanner.info">mailscanner-bounces@lists.mailscanner.info</a><br>
> > [mailto:<a href="mailto:mailscanner-">mailscanner-</a> <a href="mailto:bounces@lists.mailscanner.info">
bounces@lists.mailscanner.info</a>] On Behalf Of<br>
> > Jerry Benton<br>
> > Sent: Sunday, February 22, 2015 4:11 PM<br>
> > To: MailScanner discussion<br>
> > Subject: Re: Filename Restrictions Not working<br>
> ><br>
> > Its not beta anymore. (The RPM package.)<br>
> ><br>
> > -<br>
> > Jerry Benton<br>
> > <a href="http://www.mailborder.com" target="_blank">www.mailborder.com</a><br>
> ><br>
> ><br>
> ><br>
> > > On Feb 22, 2015, at 4:33 PM, James Nelson <<a href="mailto:James.Nelson@vgt.net">James.Nelson@vgt.net</a>><br>
> > wrote:<br>
> > ><br>
> > > I will try that tomorrow...i'm about out of other ideas.<br>
> > ><br>
> > > I suppose I could also try the new MS beta, just to throw<br>
> > > something<br>
> > else at the wall...<br>
> > ><br>
> > ><br>
> > ><br>
> > ><br>
> > > “a rockpile ceases to be a rockpile the moment a single man<br>
> > contemplates it, bearing within him the image of a cathedral.”<br>
> > ><br>
> > ><br>
> > > -----Original Message-----<br>
> > > From: <a href="mailto:mailscanner-bounces@lists.mailscanner.info">mailscanner-bounces@lists.mailscanner.info</a><br>
> > > [mailto:<a href="mailto:mailscanner-">mailscanner-</a><br>
> > <a href="mailto:bounces@lists.mailscanner.info">bounces@lists.mailscanner.info</a>] On Behalf Of Jerry Benton<br>
> > > Sent: Saturday, February 21, 2015 5:54 AM<br>
> > > To: MailScanner discussion<br>
> > > Subject: Re: Filename Restrictions Not working<br>
> > ><br>
> > > I’m not pimping my product, but I would suggest you install a<br>
> > Mailborder server for a comparison test. Check to see if it is<br>
> > working correctly (the Mailborder server) and compare the configs on<br>
> > the Mailborder server to yours. This will at least eliminate the<br>
> > Mailscanner configuration variable from the equation.<br>
> > ><br>
> > > -<br>
> > > Jerry Benton<br>
> > > <a href="http://www.mailborder.com" target="_blank">www.mailborder.com</a><br>
> > ><br>
> > ><br>
> > ><br>
> > >> On Feb 21, 2015, at 2:29 AM, James Nelson <<a href="mailto:James.Nelson@vgt.net">James.Nelson@vgt.net</a>><br>
> > wrote:<br>
> > >><br>
> > >> Sigh, built a brand new MailScanner box from scratch...once<br>
> > >> again,<br>
> > everything works except filename checking. The only thing I changed<br>
> > was to disallow zip files(just changed allow to deny in<br>
> > filenames.rules.conf) and it still lets it all through.<br>
> > >><br>
> > >> It just doesn't seem to want to work, with no errors to shed any<br>
> > light.<br>
> > >> --<br>
> > >> MailScanner mailing list<br>
> > >> <a href="mailto:mailscanner@lists.mailscanner.info">mailscanner@lists.mailscanner.info</a><br>
> > >> <a href="http://lists.mailscanner.info/mailman/listinfo/mailscanner" target="_blank">
http://lists.mailscanner.info/mailman/listinfo/mailscanner</a><br>
> > >><br>
> > >> Before posting, read <a href="http://wiki.mailscanner.info/posting" target="_blank">
http://wiki.mailscanner.info/posting</a><br>
> > >><br>
> > >> Support MailScanner development - buy the book off the website!<br>
> > ><br>
> > > --<br>
> > > MailScanner mailing list<br>
> > > <a href="mailto:mailscanner@lists.mailscanner.info">mailscanner@lists.mailscanner.info</a><br>
> > > <a href="http://lists.mailscanner.info/mailman/listinfo/mailscanner" target="_blank">
http://lists.mailscanner.info/mailman/listinfo/mailscanner</a><br>
> > ><br>
> > > Before posting, read <a href="http://wiki.mailscanner.info/posting" target="_blank">
http://wiki.mailscanner.info/posting</a><br>
> > ><br>
> > > Support MailScanner development - buy the book off the website!<br>
> > > --<br>
> > > MailScanner mailing list<br>
> > > <a href="mailto:mailscanner@lists.mailscanner.info">mailscanner@lists.mailscanner.info</a><br>
> > > <a href="http://lists.mailscanner.info/mailman/listinfo/mailscanner" target="_blank">
http://lists.mailscanner.info/mailman/listinfo/mailscanner</a><br>
> > ><br>
> > > Before posting, read <a href="http://wiki.mailscanner.info/posting" target="_blank">
http://wiki.mailscanner.info/posting</a><br>
> > ><br>
> > > Support MailScanner development - buy the book off the website!<br>
> ><br>
> > --<br>
> > MailScanner mailing list<br>
> > <a href="mailto:mailscanner@lists.mailscanner.info">mailscanner@lists.mailscanner.info</a><br>
> > <a href="http://lists.mailscanner.info/mailman/listinfo/mailscanner" target="_blank">
http://lists.mailscanner.info/mailman/listinfo/mailscanner</a><br>
> ><br>
> > Before posting, read <a href="http://wiki.mailscanner.info/posting" target="_blank">
http://wiki.mailscanner.info/posting</a><br>
> ><br>
> > Support MailScanner development - buy the book off the website!<br>
> > --<br>
> > MailScanner mailing list<br>
> > <a href="mailto:mailscanner@lists.mailscanner.info">mailscanner@lists.mailscanner.info</a><br>
> > <a href="http://lists.mailscanner.info/mailman/listinfo/mailscanner" target="_blank">
http://lists.mailscanner.info/mailman/listinfo/mailscanner</a><br>
> ><br>
> > Before posting, read <a href="http://wiki.mailscanner.info/posting" target="_blank">
http://wiki.mailscanner.info/posting</a><br>
> ><br>
> > Support MailScanner development - buy the book off the website!<br>
> --<br>
> MailScanner mailing list<br>
> <a href="mailto:mailscanner@lists.mailscanner.info">mailscanner@lists.mailscanner.info</a><br>
> <a href="http://lists.mailscanner.info/mailman/listinfo/mailscanner" target="_blank">
http://lists.mailscanner.info/mailman/listinfo/mailscanner</a><br>
><br>
> Before posting, read <a href="http://wiki.mailscanner.info/posting" target="_blank">
http://wiki.mailscanner.info/posting</a><br>
><br>
> Support MailScanner development - buy the book off the website!<br>
> --<br>
> MailScanner mailing list<br>
> <a href="mailto:mailscanner@lists.mailscanner.info">mailscanner@lists.mailscanner.info</a><br>
> <a href="http://lists.mailscanner.info/mailman/listinfo/mailscanner" target="_blank">
http://lists.mailscanner.info/mailman/listinfo/mailscanner</a><br>
><br>
> Before posting, read <a href="http://wiki.mailscanner.info/posting" target="_blank">
http://wiki.mailscanner.info/posting</a><br>
><br>
> Support MailScanner development - buy the book off the website!<br>
--<br>
MailScanner mailing list<br>
<a href="mailto:mailscanner@lists.mailscanner.info">mailscanner@lists.mailscanner.info</a><br>
<a href="http://lists.mailscanner.info/mailman/listinfo/mailscanner" target="_blank">http://lists.mailscanner.info/mailman/listinfo/mailscanner</a><br>
<br>
Before posting, read <a href="http://wiki.mailscanner.info/posting" target="_blank">
http://wiki.mailscanner.info/posting</a><br>
<br>
Support MailScanner development - buy the book off the website!<br>
--<br>
MailScanner mailing list<br>
<a href="mailto:mailscanner@lists.mailscanner.info">mailscanner@lists.mailscanner.info</a><br>
<a href="http://lists.mailscanner.info/mailman/listinfo/mailscanner" target="_blank">http://lists.mailscanner.info/mailman/listinfo/mailscanner</a><br>
<br>
Before posting, read <a href="http://wiki.mailscanner.info/posting" target="_blank">
http://wiki.mailscanner.info/posting</a><br>
<br>
Support MailScanner development - buy the book off the website!<o:p></o:p></p>
</blockquote>
</div>
</div>
</blockquote>
<blockquote style="margin-top:5.0pt;margin-bottom:5.0pt">
<div>
<p class="MsoNormal">-- <br>
MailScanner mailing list<br>
<a href="mailto:mailscanner@lists.mailscanner.info">mailscanner@lists.mailscanner.info</a><br>
<a href="http://lists.mailscanner.info/mailman/listinfo/mailscanner">http://lists.mailscanner.info/mailman/listinfo/mailscanner</a><br>
<br>
Before posting, read <a href="http://wiki.mailscanner.info/posting">http://wiki.mailscanner.info/posting</a><br>
<br>
Support MailScanner development - buy the book off the website! <o:p></o:p></p>
</div>
</blockquote>
</div>
</div>
</body>
</html>