<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META content="text/html; charset=us-ascii" http-equiv=Content-Type>
<META name=GENERATOR content="MSHTML 11.00.10570.1001"></HEAD>
<BODY>
<DIV dir=ltr align=left><SPAN class=021580015-28052019><FONT color=#0000ff
size=2 face=Arial>Yes, i have 2 of them. </FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=021580015-28052019><FONT color=#0000ff
size=2 face=Arial></FONT></SPAN> </DIV>
<DIV dir=ltr align=left><SPAN class=021580015-28052019><FONT color=#0000ff
size=2
face=Arial>filename.rules.conf:deny
\.com$ Windows/DOS
Executable </FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=021580015-28052019><FONT color=#0000ff
size=2
face=Arial>archives.filename.rules.conf:deny
\.com$ Windows/DOS
Executable
Executable DOS/Windows programs are dangerous in email<BR></FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=021580015-28052019></SPAN><SPAN
class=021580015-28052019><FONT color=#0000ff size=2 face=Arial>Greetz,
</FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=021580015-28052019><FONT color=#0000ff
size=2 face=Arial></FONT></SPAN> </DIV>
<DIV dir=ltr align=left><SPAN class=021580015-28052019><FONT color=#0000ff
size=2 face=Arial>Louis</FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=021580015-28052019><FONT color=#0000ff
size=2 face=Arial> </DIV></FONT></SPAN><BR>
<BLOCKQUOTE
style="PADDING-LEFT: 5px; MARGIN-LEFT: 5px; BORDER-LEFT: #0000ff 2px solid; MARGIN-RIGHT: 0px"
dir=ltr>
<DIV lang=nl class=OutlookMessageHeader dir=ltr align=left>
<HR tabIndex=-1>
<FONT size=2 face=Tahoma><B>Van:</B> Shawn Iverson
[mailto:iversons@rushville.k12.in.us] <BR><B>Verzonden:</B> dinsdag 28 mei
2019 16:59<BR><B>Aan:</B> MailScanner Discussion<BR><B>CC:</B> L.P.H. van
Belle<BR><B>Onderwerp:</B> Re: wrong detection of file?<BR></FONT><BR></DIV>
<DIV></DIV>
<DIV dir=ltr>Yeah, it is matching by filename, not filetype, and it may be
parsing the name wrong.
<DIV><BR></DIV>
<DIV>Can you verify this rule is present?</DIV>
<DIV><BR></DIV>
<DIV>deny \.com$</DIV>
<DIV><BR></DIV>
<DIV>Which should not match because it is not the end of the filename but I
bet it is.</DIV></DIV><BR>
<DIV class=gmail_quote>
<DIV class=gmail_attr dir=ltr>On Tue, May 28, 2019 at 10:43 AM L.P.H. van
Belle via MailScanner <<A
href="mailto:mailscanner@lists.mailscanner.info">mailscanner@lists.mailscanner.info</A>>
wrote:<BR></DIV>
<BLOCKQUOTE class=gmail_quote
style="PADDING-LEFT: 1ex; BORDER-LEFT: rgb(204,204,204) 1px solid; MARGIN: 0px 0px 0px 0.8ex">Hai
Shawn, <BR><BR><BR>Have you ever seen something like this. <BR><BR>I just
e-mailed a file, with a name as shown below. <BR>SSL Server Test <A
href="http://hostname.example.com" rel=noreferrer
target=_blank>hostname.example.com</A> (Powered by Qualys SSL
Labs).pdf<BR><BR>The resport shows : <BR>Message: Executable DOS/Windows
programs are dangerous in email (SSL Server Tes.com)<BR>And its shown in
mailwatch as : application/pdf; charset=binary<BR><BR>Now the thing i
dont get here is, how is the name "SSL Server Tes.com" constructed
from<BR>The name : SSL Server Test <A href="http://hostname.example.com"
rel=noreferrer target=_blank>hostname.example.com</A> (Powered by Qualys SSL
Labs).pdf<BR><BR>I only change the hostname and domain here, i kept the
format exact the same.<BR><BR>Greetz, <BR><BR>Louis<BR><BR><BR><BR>--
<BR>MailScanner mailing list<BR><A
href="mailto:mailscanner@lists.mailscanner.info"
target=_blank>mailscanner@lists.mailscanner.info</A><BR><A
href="http://lists.mailscanner.info/mailman/listinfo/mailscanner"
rel=noreferrer
target=_blank>http://lists.mailscanner.info/mailman/listinfo/mailscanner</A><BR><BR></BLOCKQUOTE></DIV><BR
clear=all>
<DIV><BR></DIV>-- <BR>
<DIV class=gmail_signature dir=ltr>
<DIV dir=ltr>
<DIV>
<DIV dir=ltr>
<DIV>
<DIV dir=ltr>
<DIV>
<DIV dir=ltr>
<DIV>
<DIV dir=ltr>
<DIV>
<DIV dir=ltr>
<DIV>
<DIV dir=ltr>
<DIV>
<DIV dir=ltr>
<DIV>
<DIV dir=ltr>
<DIV>
<DIV dir=ltr>
<DIV dir=ltr>
<DIV dir=ltr>Shawn Iverson, CETL
<DIV>Director of Technology</DIV>
<DIV>Rush County Schools</DIV>
<DIV>765-932-3901 option 7</DIV>
<DIV><A href="mailto:iversons@rushville.k12.in.us"
target=_blank>iversons@rushville.k12.in.us</A></DIV>
<DIV><BR></DIV>
<DIV><IMG
src="https://docs.google.com/uc?export=download&id=0Bw5iD0ToYvs_Zkh4eEs3R01yWXc&revid=0Bw5iD0ToYvs_QWpBK2Y2ajJtYjhOMDRFekZwK2xOamk5Q3Y0PQ"
width=89 height=96 NOSEND="1"><IMG style="FONT-SIZE: 12px"
src="https://docs.google.com/uc?export=download&id=1aBrlQou4gjB04FY-twHN_0Dn3GHVNxqa&revid=0Bw5iD0ToYvs_RnQ0eDhHcm95WHBFdkNRbXhQRXpoYkR6SEEwPQ"
NOSEND="1"><IMG alt=Cybersecurity
src="https://www.doe.in.gov/sites/default/files/cybersecurity/cybersecurity.png"
width=96 height=96
NOSEND="1"></DIV></DIV></DIV></DIV></DIV></DIV></DIV></DIV></DIV></DIV></DIV></DIV></DIV></DIV></DIV></DIV></DIV></DIV></DIV></DIV></DIV></DIV></DIV></BLOCKQUOTE></BODY></HTML>