<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=utf-8"><meta name=Generator content="Microsoft Word 15 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman",serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=EN-GB link="#0563C1" vlink="#954F72"><div class=WordSection1><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Calibri",sans-serif;color:#8A8A8A'><br><br></span><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:#8A8A8A'><o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US'><o:p> </o:p></span></p><div><div style='border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in'><p class=MsoNormal><b><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri",sans-serif'>From:</span></b><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri",sans-serif'> MailScanner [mailto:mailscanner-bounces+richard=fastnet.co.uk@lists.mailscanner.info] <b>On Behalf Of </b>Bryan Laurila<br><b>Sent:</b> Friday, May 13, 2016 17:04<br><b>To:</b> mailscanner@lists.mailscanner.info<br><b>Subject:</b> JavaScrip files<o:p></o:p></span></p></div></div><p class=MsoNormal><o:p> </o:p></p><div><div id="yui_3_16_0_ym19_1_1463154889484_6064"><div id="yui_3_16_0_ym19_1_1463154889484_6036"><p class=MsoNormal style='background:white'><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:black'>Lately we have been getting hit with a ton of spam loaded with JavaScript files to the tune of about 4-6 gb per day. These files have been filling up our quarantine directory and have caused our MailScanner boxes to stop processing email. I have cleared out the quarantine directories and have set “Quarantine Infections = no” to prevent these files from crashing the system.<o:p></o:p></span></p></div><div id="yui_3_16_0_ym19_1_1463154889484_6037"><p class=MsoNormal style='background:white'><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:black'> <o:p></o:p></span></p></div><div id="yui_3_16_0_ym19_1_1463154889484_6038"><p class=MsoNormal style='background:white'><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:black'>We also have a large number of false-positive items that we have to retrieve out of the quarantine on a weekly basis so keeping the “Quarantine Infections = no” in place for the long-term is not an option. <o:p></o:p></span></p></div><div id="yui_3_16_0_ym19_1_1463154889484_6039"><p class=MsoNormal style='background:white'><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:black'> <o:p></o:p></span></p></div><div id="yui_3_16_0_ym19_1_1463154889484_6040"><p class=MsoNormal style='background:white'><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:black'>Is there a way to set this the “Quarantine Infections” option back to ”no” but still delete/refuse all emails containing JavaScript files?<o:p></o:p></span></p></div><div id="yui_3_16_0_ym19_1_1463154889484_6041"><p class=MsoNormal style='background:white'><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:black'> <o:p></o:p></span></p></div><div id="yui_3_16_0_ym19_1_1463154889484_6042"><p class=MsoNormal style='background:white'><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:black'>Thanks!<o:p></o:p></span></p></div><div id="yui_3_16_0_ym19_1_1463154889484_6043"><p class=MsoNormal style='background:white'><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:black'> <o:p></o:p></span></p></div><div id="yui_3_16_0_ym19_1_1463154889484_6044"><p class=MsoNormal style='background:white'><span style='font-size:10.0pt;color:black'>Bryan S. Laurila</span><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:black'><o:p></o:p></span></p></div><div id="yui_3_16_0_ym19_1_1463154889484_6047"><p class=MsoNormal style='background:white'><span style='font-size:10.0pt;color:black'>Senior Network Support Analyst</span><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:black'><o:p></o:p></span></p></div><div id="yui_3_16_0_ym19_1_1463154889484_6050"><p class=MsoNormal style='background:white'><span style='font-size:10.0pt;color:black'>Dickinson County Healthcare System</span><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:black'><o:p></o:p></span></p></div><div id="yui_3_16_0_ym19_1_1463154889484_6059"><p class=MsoNormal style='background:white'><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:black'> <o:p></o:p></span></p></div><div id="yui_3_16_0_ym19_1_1463154889484_6060"><p class=MsoNormal style='background:white'><i><span style='font-size:8.0pt;color:black'>"Life begins at the end of your comfort zone!"<o:p></o:p></span></i></p><p class=MsoNormal style='background:white'><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal style='background:white'><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal style='background:white'><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal style='background:white'><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal style='background:white'><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal style='background:white'><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D'>I sometimes get this problem. I created a script to just search for horrible files and delete them from the quarantine. You might just want to recursively grep through your quarantine directory for js files or anything you just don’t want, then remove them. <o:p></o:p></span></p><p class=MsoNormal style='background:white'><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D'>Something like – <o:p></o:p></span></p><p class=MsoNormal style='background:white'><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal style='background:white'><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D'>#!/usr/local/bin/bash<o:p></o:p></span></p><p class=MsoNormal style='background:white'><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D'>cd /var/spool/MailScanner/quarantine &&<o:p></o:p></span></p><p class=MsoNormal style='background:white'><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D'>grep -r VOICE * | cut -d "/" -f1,2 | grep -v Binary | sort | uniq | while read crap ; do rm -r $crap ; done<o:p></o:p></span></p><p class=MsoNormal style='background:white'><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal style='background:white'><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal style='background:white'><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D'>Just replace VOICE with your search. I guess there may be better options, but this works fine for me. <o:p></o:p></span></p><p class=MsoNormal style='background:white'><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal style='background:white'><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D'>Thanks,<o:p></o:p></span></p><p class=MsoNormal style='background:white'><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D'>Rich<o:p></o:p></span></p></div></div></div></div></body></html>