<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=Windows-1252">
</head>
<body dir="auto">
<div>Hi Glenn, I ran --lint as postfix and it does detect <a href="http://eicar.com">
eicar.com</a> as a blocked filetype, it just doesn't do anything about it during mail scanning. &nbsp;I had the thought that my rules files had permissions problems, but I made them readable for everyone just to be sure.</div>
<div><br>
</div>
<div>I have the group as Apache as part of the configuration for MailWatch.</div>
<div><br>
</div>
<div><br>
</div>
<div><br>
On Feb 24, 2015, at 3:37 AM, Glenn Steen &lt;<a href="mailto:glenn.steen@gmail.com">glenn.steen@gmail.com</a>&gt; wrote:<br>
<br>
</div>
<blockquote type="cite">
<div>
<p dir="ltr">I see you have run as user/group set to postfix/apache...&nbsp; When you've done your lint and debug runs, did you do them as postfix user or root?<br>
My guess is that the rule file for filenames might not be readable to the postfix user.</p>
<p dir="ltr">Cheers!<br>
-- <br>
-- Glenn </p>
<div class="gmail_quote">Den 23 feb 2015 22:09 skrev &quot;James Nelson&quot; &lt;<a href="mailto:James.Nelson@vgt.net">James.Nelson@vgt.net</a>&gt;:<br type="attribution">
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<br>
Sorry about that, I thought I set it to public. Try again :).<br>
<br>
Jerry, I'm building a Mailborder server now to test.<br>
<br>
<br>
a rockpile ceases to be a rockpile the moment a single man contemplates it, bearing within him the image of a cathedral.<br>
<br>
<br>
-----Original Message-----<br>
From: <a href="mailto:mailscanner-bounces@lists.mailscanner.info">mailscanner-bounces@lists.mailscanner.info</a> [mailto:<a href="mailto:mailscanner-bounces@lists.mailscanner.info">mailscanner-bounces@lists.mailscanner.info</a>] On Behalf Of Kevin Miller<br>
Sent: Monday, February 23, 2015 2:20 PM<br>
To: 'MailScanner discussion'<br>
Subject: RE: Filename Restrictions Not working<br>
<br>
It said this &quot;This is a private paste. If you created this paste, please login to view it.&quot;&nbsp; I couldn't see it.<br>
<br>
If there's anything that needs to be munged (like your watermark), just edit that before posting and make it a public post.<br>
<br>
...Kevin<br>
--<br>
Kevin Miller<br>
Network/email Administrator, CBJ MIS Dept.<br>
155 South Seward Street<br>
Juneau, Alaska 99801<br>
Phone: <a href="tel:%28907%29%20586-0242" value="&#43;19075860242">(907) 586-0242</a>, Fax:
<a href="tel:%28907%29%20586-4500" value="&#43;19075864500">(907) 586-4500</a> Registered Linux User No: 307357<br>
<br>
<br>
&gt; -----Original Message-----<br>
&gt; From: <a href="mailto:mailscanner-bounces@lists.mailscanner.info">mailscanner-bounces@lists.mailscanner.info</a> [mailto:<a href="mailto:mailscanner-">mailscanner-</a><br>
&gt; <a href="mailto:bounces@lists.mailscanner.info">bounces@lists.mailscanner.info</a>] On Behalf Of James Nelson<br>
&gt; Sent: Monday, February 23, 2015 10:52 AM<br>
&gt; To: MailScanner discussion<br>
&gt; Subject: RE: Filename Restrictions Not working<br>
&gt;<br>
&gt; Kevin,<br>
&gt;<br>
&gt; Here's my complete MailScanner.conf:<br>
&gt;<br>
&gt; <a href="http://pastebin.com/ci9dz8iL" target="_blank">http://pastebin.com/ci9dz8iL</a><br>
&gt;<br>
&gt; Jerry:<br>
&gt;<br>
&gt; I changed default to *@* this morning in the course of my, &quot;did that<br>
&gt; work? No, okay, how about this,&quot; but the result was the same regardless.<br>
&gt;<br>
&gt; I'm not applying any configuration via conf.d at the moment...if I<br>
&gt; were to do that, would it supersede anything in MailScanner.conf?<br>
&gt;<br>
&gt;<br>
&gt;<br>
&gt; a rockpile ceases to be a rockpile the moment a single man<br>
&gt; contemplates it, bearing within him the image of a cathedral.<br>
&gt;<br>
&gt;<br>
&gt; -----Original Message-----<br>
&gt; From: <a href="mailto:mailscanner-bounces@lists.mailscanner.info">mailscanner-bounces@lists.mailscanner.info</a> [mailto:<a href="mailto:mailscanner-">mailscanner-</a><br>
&gt; <a href="mailto:bounces@lists.mailscanner.info">bounces@lists.mailscanner.info</a>] On Behalf Of Kevin Miller<br>
&gt; Sent: Monday, February 23, 2015 12:50 PM<br>
&gt; To: 'MailScanner discussion'<br>
&gt; Subject: RE: Filename Restrictions Not working<br>
&gt;<br>
&gt; Maybe you could post your MailScanner.conf to pastebin.&nbsp; I'm guessing<br>
&gt; something in there is wonky.<br>
&gt;<br>
&gt; ...Kevin<br>
&gt; --<br>
&gt; Kevin Miller<br>
&gt; Network/email Administrator, CBJ MIS Dept.<br>
&gt; 155 South Seward Street<br>
&gt; Juneau, Alaska 99801<br>
&gt; Phone: <a href="tel:%28907%29%20586-0242" value="&#43;19075860242">(907) 586-0242</a>, Fax:
<a href="tel:%28907%29%20586-4500" value="&#43;19075864500">(907) 586-4500</a> Registered Linux User No:<br>
&gt; 307357<br>
&gt;<br>
&gt;<br>
&gt; &gt; -----Original Message-----<br>
&gt; &gt; From: <a href="mailto:mailscanner-bounces@lists.mailscanner.info">mailscanner-bounces@lists.mailscanner.info</a><br>
&gt; &gt; [mailto:<a href="mailto:mailscanner-">mailscanner-</a> <a href="mailto:bounces@lists.mailscanner.info">
bounces@lists.mailscanner.info</a>] On Behalf Of<br>
&gt; &gt; James Nelson<br>
&gt; &gt; Sent: Monday, February 23, 2015 9:26 AM<br>
&gt; &gt; To: MailScanner discussion<br>
&gt; &gt; Subject: RE: Filename Restrictions Not working<br>
&gt; &gt;<br>
&gt; &gt; Well, an interesting update...<br>
&gt; &gt;<br>
&gt; &gt; I changed up my approach, and pointed the Deny Filenames = in<br>
&gt; &gt; MailScanner.conf to %rules-dir%/filename_deny.rules , which is as<br>
&gt; &gt; follows:<br>
&gt; &gt;<br>
&gt; &gt; To: *@*&nbsp; &nbsp; &nbsp;\.ico$ \.ani \.cur$ \.hlp$ \.zip$ \.ceo$ \.cab$ \.reg$ \.chm$<br>
&gt; &gt; \.cnf$ \.hta$ \.ins$ \.jse?$ \.job$ \.lnk$ \.mat$ \.pif$ \.scf$<br>
&gt; &gt; \.sct$ \.shs$ \.shb$ \.vb[es]$ \.ws[cfh]$ \.xnk$ \.cer$ \.its$<br>
&gt; &gt; \.mau$ \.md[az]$ \.prf$ \.pst$ \.tmp$ \.vsmacros$ \.vs[stw]$ \.ws$<br>
&gt; &gt; \.com$ \.exe$ \.scr$ \.bat$ \.cmd$ \.cpl$ \.mhtml$ \.s{10,}<br>
&gt; &gt; \.[a-z][a-z0-9]{2,3}\s*\.[a-z0- 9]{3}$<br>
&gt; &gt;<br>
&gt; &gt; When running MailScanner --lint now, it DOES detect <a href="http://eicar.com" target="_blank">
eicar.com</a> as a<br>
&gt; &gt; blocked filetype.&nbsp; However, it's still allowing blocked filetypes<br>
&gt; &gt; through ?<br>
&gt; &gt;<br>
&gt; &gt;<br>
&gt; &gt;<br>
&gt; &gt;<br>
&gt; &gt; a rockpile ceases to be a rockpile the moment a single man<br>
&gt; &gt; contemplates it, bearing within him the image of a cathedral.<br>
&gt; &gt;<br>
&gt; &gt;<br>
&gt; &gt; -----Original Message-----<br>
&gt; &gt; From: <a href="mailto:mailscanner-bounces@lists.mailscanner.info">mailscanner-bounces@lists.mailscanner.info</a><br>
&gt; &gt; [mailto:<a href="mailto:mailscanner-">mailscanner-</a> <a href="mailto:bounces@lists.mailscanner.info">
bounces@lists.mailscanner.info</a>] On Behalf Of<br>
&gt; &gt; Jerry Benton<br>
&gt; &gt; Sent: Sunday, February 22, 2015 4:11 PM<br>
&gt; &gt; To: MailScanner discussion<br>
&gt; &gt; Subject: Re: Filename Restrictions Not working<br>
&gt; &gt;<br>
&gt; &gt; Its not beta anymore. (The RPM package.)<br>
&gt; &gt;<br>
&gt; &gt; -<br>
&gt; &gt; Jerry Benton<br>
&gt; &gt; <a href="http://www.mailborder.com" target="_blank">www.mailborder.com</a><br>
&gt; &gt;<br>
&gt; &gt;<br>
&gt; &gt;<br>
&gt; &gt; &gt; On Feb 22, 2015, at 4:33 PM, James Nelson &lt;<a href="mailto:James.Nelson@vgt.net">James.Nelson@vgt.net</a>&gt;<br>
&gt; &gt; wrote:<br>
&gt; &gt; &gt;<br>
&gt; &gt; &gt; I will try that tomorrow...i'm about out of other ideas.<br>
&gt; &gt; &gt;<br>
&gt; &gt; &gt; I suppose I could also try the new MS beta, just to throw<br>
&gt; &gt; &gt; something<br>
&gt; &gt; else at the wall...<br>
&gt; &gt; &gt;<br>
&gt; &gt; &gt;<br>
&gt; &gt; &gt;<br>
&gt; &gt; &gt;<br>
&gt; &gt; &gt; a rockpile ceases to be a rockpile the moment a single man<br>
&gt; &gt; contemplates it, bearing within him the image of a cathedral.<br>
&gt; &gt; &gt;<br>
&gt; &gt; &gt;<br>
&gt; &gt; &gt; -----Original Message-----<br>
&gt; &gt; &gt; From: <a href="mailto:mailscanner-bounces@lists.mailscanner.info">mailscanner-bounces@lists.mailscanner.info</a><br>
&gt; &gt; &gt; [mailto:<a href="mailto:mailscanner-">mailscanner-</a><br>
&gt; &gt; <a href="mailto:bounces@lists.mailscanner.info">bounces@lists.mailscanner.info</a>] On Behalf Of Jerry Benton<br>
&gt; &gt; &gt; Sent: Saturday, February 21, 2015 5:54 AM<br>
&gt; &gt; &gt; To: MailScanner discussion<br>
&gt; &gt; &gt; Subject: Re: Filename Restrictions Not working<br>
&gt; &gt; &gt;<br>
&gt; &gt; &gt; Im not pimping my product, but I would suggest you install a<br>
&gt; &gt; Mailborder server for a comparison test. Check to see if it is<br>
&gt; &gt; working correctly (the Mailborder server) and compare the configs on<br>
&gt; &gt; the Mailborder server to yours. This will at least eliminate the<br>
&gt; &gt; Mailscanner configuration variable from the equation.<br>
&gt; &gt; &gt;<br>
&gt; &gt; &gt; -<br>
&gt; &gt; &gt; Jerry Benton<br>
&gt; &gt; &gt; <a href="http://www.mailborder.com" target="_blank">www.mailborder.com</a><br>
&gt; &gt; &gt;<br>
&gt; &gt; &gt;<br>
&gt; &gt; &gt;<br>
&gt; &gt; &gt;&gt; On Feb 21, 2015, at 2:29 AM, James Nelson &lt;<a href="mailto:James.Nelson@vgt.net">James.Nelson@vgt.net</a>&gt;<br>
&gt; &gt; wrote:<br>
&gt; &gt; &gt;&gt;<br>
&gt; &gt; &gt;&gt; Sigh, built a brand new MailScanner box from scratch...once<br>
&gt; &gt; &gt;&gt; again,<br>
&gt; &gt; everything works except filename checking. The only thing I changed<br>
&gt; &gt; was to disallow zip files(just changed allow to deny in<br>
&gt; &gt; filenames.rules.conf) and it still lets it all through.<br>
&gt; &gt; &gt;&gt;<br>
&gt; &gt; &gt;&gt; It just doesn't seem to want to work, with no errors to shed any<br>
&gt; &gt; light.<br>
&gt; &gt; &gt;&gt; --<br>
&gt; &gt; &gt;&gt; MailScanner mailing list<br>
&gt; &gt; &gt;&gt; <a href="mailto:mailscanner@lists.mailscanner.info">mailscanner@lists.mailscanner.info</a><br>
&gt; &gt; &gt;&gt; <a href="http://lists.mailscanner.info/mailman/listinfo/mailscanner" target="_blank">
http://lists.mailscanner.info/mailman/listinfo/mailscanner</a><br>
&gt; &gt; &gt;&gt;<br>
&gt; &gt; &gt;&gt; Before posting, read <a href="http://wiki.mailscanner.info/posting" target="_blank">
http://wiki.mailscanner.info/posting</a><br>
&gt; &gt; &gt;&gt;<br>
&gt; &gt; &gt;&gt; Support MailScanner development - buy the book off the website!<br>
&gt; &gt; &gt;<br>
&gt; &gt; &gt; --<br>
&gt; &gt; &gt; MailScanner mailing list<br>
&gt; &gt; &gt; <a href="mailto:mailscanner@lists.mailscanner.info">mailscanner@lists.mailscanner.info</a><br>
&gt; &gt; &gt; <a href="http://lists.mailscanner.info/mailman/listinfo/mailscanner" target="_blank">
http://lists.mailscanner.info/mailman/listinfo/mailscanner</a><br>
&gt; &gt; &gt;<br>
&gt; &gt; &gt; Before posting, read <a href="http://wiki.mailscanner.info/posting" target="_blank">
http://wiki.mailscanner.info/posting</a><br>
&gt; &gt; &gt;<br>
&gt; &gt; &gt; Support MailScanner development - buy the book off the website!<br>
&gt; &gt; &gt; --<br>
&gt; &gt; &gt; MailScanner mailing list<br>
&gt; &gt; &gt; <a href="mailto:mailscanner@lists.mailscanner.info">mailscanner@lists.mailscanner.info</a><br>
&gt; &gt; &gt; <a href="http://lists.mailscanner.info/mailman/listinfo/mailscanner" target="_blank">
http://lists.mailscanner.info/mailman/listinfo/mailscanner</a><br>
&gt; &gt; &gt;<br>
&gt; &gt; &gt; Before posting, read <a href="http://wiki.mailscanner.info/posting" target="_blank">
http://wiki.mailscanner.info/posting</a><br>
&gt; &gt; &gt;<br>
&gt; &gt; &gt; Support MailScanner development - buy the book off the website!<br>
&gt; &gt;<br>
&gt; &gt; --<br>
&gt; &gt; MailScanner mailing list<br>
&gt; &gt; <a href="mailto:mailscanner@lists.mailscanner.info">mailscanner@lists.mailscanner.info</a><br>
&gt; &gt; <a href="http://lists.mailscanner.info/mailman/listinfo/mailscanner" target="_blank">
http://lists.mailscanner.info/mailman/listinfo/mailscanner</a><br>
&gt; &gt;<br>
&gt; &gt; Before posting, read <a href="http://wiki.mailscanner.info/posting" target="_blank">
http://wiki.mailscanner.info/posting</a><br>
&gt; &gt;<br>
&gt; &gt; Support MailScanner development - buy the book off the website!<br>
&gt; &gt; --<br>
&gt; &gt; MailScanner mailing list<br>
&gt; &gt; <a href="mailto:mailscanner@lists.mailscanner.info">mailscanner@lists.mailscanner.info</a><br>
&gt; &gt; <a href="http://lists.mailscanner.info/mailman/listinfo/mailscanner" target="_blank">
http://lists.mailscanner.info/mailman/listinfo/mailscanner</a><br>
&gt; &gt;<br>
&gt; &gt; Before posting, read <a href="http://wiki.mailscanner.info/posting" target="_blank">
http://wiki.mailscanner.info/posting</a><br>
&gt; &gt;<br>
&gt; &gt; Support MailScanner development - buy the book off the website!<br>
&gt; --<br>
&gt; MailScanner mailing list<br>
&gt; <a href="mailto:mailscanner@lists.mailscanner.info">mailscanner@lists.mailscanner.info</a><br>
&gt; <a href="http://lists.mailscanner.info/mailman/listinfo/mailscanner" target="_blank">
http://lists.mailscanner.info/mailman/listinfo/mailscanner</a><br>
&gt;<br>
&gt; Before posting, read <a href="http://wiki.mailscanner.info/posting" target="_blank">
http://wiki.mailscanner.info/posting</a><br>
&gt;<br>
&gt; Support MailScanner development - buy the book off the website!<br>
&gt; --<br>
&gt; MailScanner mailing list<br>
&gt; <a href="mailto:mailscanner@lists.mailscanner.info">mailscanner@lists.mailscanner.info</a><br>
&gt; <a href="http://lists.mailscanner.info/mailman/listinfo/mailscanner" target="_blank">
http://lists.mailscanner.info/mailman/listinfo/mailscanner</a><br>
&gt;<br>
&gt; Before posting, read <a href="http://wiki.mailscanner.info/posting" target="_blank">
http://wiki.mailscanner.info/posting</a><br>
&gt;<br>
&gt; Support MailScanner development - buy the book off the website!<br>
--<br>
MailScanner mailing list<br>
<a href="mailto:mailscanner@lists.mailscanner.info">mailscanner@lists.mailscanner.info</a><br>
<a href="http://lists.mailscanner.info/mailman/listinfo/mailscanner" target="_blank">http://lists.mailscanner.info/mailman/listinfo/mailscanner</a><br>
<br>
Before posting, read <a href="http://wiki.mailscanner.info/posting" target="_blank">
http://wiki.mailscanner.info/posting</a><br>
<br>
Support MailScanner development - buy the book off the website!<br>
--<br>
MailScanner mailing list<br>
<a href="mailto:mailscanner@lists.mailscanner.info">mailscanner@lists.mailscanner.info</a><br>
<a href="http://lists.mailscanner.info/mailman/listinfo/mailscanner" target="_blank">http://lists.mailscanner.info/mailman/listinfo/mailscanner</a><br>
<br>
Before posting, read <a href="http://wiki.mailscanner.info/posting" target="_blank">
http://wiki.mailscanner.info/posting</a><br>
<br>
Support MailScanner development - buy the book off the website!<br>
</blockquote>
</div>
</div>
</blockquote>
<blockquote type="cite">
<div><span>-- </span><br>
<span>MailScanner mailing list</span><br>
<span><a href="mailto:mailscanner@lists.mailscanner.info">mailscanner@lists.mailscanner.info</a></span><br>
<span><a href="http://lists.mailscanner.info/mailman/listinfo/mailscanner">http://lists.mailscanner.info/mailman/listinfo/mailscanner</a></span><br>
<span></span><br>
<span>Before posting, read <a href="http://wiki.mailscanner.info/posting">http://wiki.mailscanner.info/posting</a></span><br>
<span></span><br>
<span>Support MailScanner development - buy the book off the website! </span><br>
</div>
</blockquote>
</body>
</html>