<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<p>Hi,</p>
<p>In</p>
<p>/etc/MailScanner/filename.rules.conf and in<br>
/etc/MailScanner/archives.filename.rules.conf</p>
<p>I have<br>
</p>
<p><a class="moz-txt-link-abbreviated" href="mailto:manager@festa.bg">manager@festa.bg</a> \.rar$ Possible virus in archive.
Restricted by Laskov<br>
<a class="moz-txt-link-abbreviated" href="mailto:manager@festa.bg">manager@festa.bg</a> \.r[0-9]{1,2}$ Possible virus in
archive. Restricted by Laskov<br>
<a class="moz-txt-link-abbreviated" href="mailto:manager@festa.bg">manager@festa.bg</a> \.tar\.([b|g]z?2)$ Possible virus in
archive. Restricted by Laskov<br>
<a class="moz-txt-link-abbreviated" href="mailto:manager@festa.bg">manager@festa.bg</a> \.img$ Possible virus in archive.
Restricted by Laskov<br>
</p>
<p>This forwards messages with such attachments to me for a manual
review.</p>
<p>Regards<br>
Valentin<br>
</p>
<div class="moz-cite-prefix">На 4.05.20 г. в 11:20 ч., 微和的風 написа:<br>
</div>
<blockquote type="cite"
cite="mid:005d01d621ec$cf205750$6d6105f0$@flytonet.com">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<meta name="Generator" content="Microsoft Word 15 (filtered
medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:新細明體;
panose-1:2 2 5 0 0 0 0 0 0 0;}
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:"\@新細明體";
panose-1:2 1 6 1 0 1 1 1 1 1;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Calibri",sans-serif;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;}
/* Page Definitions */
@page WordSection1
{size:612.0pt 792.0pt;
margin:72.0pt 90.0pt 72.0pt 90.0pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
<div class="WordSection1">
<p class="MsoNormal"><span lang="EN-US">Hi,<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">I had set a rule for
blocking some filenames. <o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">After the test of
attachment, the attachments which are not allowed had been
removed, but the email had still been delivered to user with
no attachments.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">If I don’t want the user
to receive the message before the administrator has checked,
could I qurantine the message if attachment tests of
Mailscanner do not pass ?<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">Some settings of
MailScanner.conf<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">==================================<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">Filename Rules =
%etc-dir%/filescan.rules<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">Quarantine Whole Message
= yes<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">Quarantine Infections =
yes<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">===================================<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">Thanks in advance.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">zephyr<o:p></o:p></span></p>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<pre class="moz-quote-pre" wrap="">
</pre>
</blockquote>
<pre class="moz-signature" cols="72">--
Поздрави!
Валентин Ласков
Системен администратор
"Феста Холдинг" АД
бул. "Вл. Варненчик" 48
9000 гр. Варна
тел.: +359 52 669137
GSM: +359 888 669137
Fax: +359 52 669110</pre>
</body>
</html>