Guardian Digital Inc. >
InfoCenter >
Mailing List Archives >
Amavis
Amavis Mailing List Archive
>My question is this, in what order are the postfix/amavis rules
>processed?
>When I send an exe file to myself from the outside I get a reject from
>*postfix*
>not amavis, however, I still receive message similar to below on a
daily
>basis.
>Any ideas? Thanks in advance.
>
>Jack
>
>Sample amavis report:
>
> BANNED NAME (.exe) FROM <ieper@punch-gmbh.de>
>
>No viruses were found.
>
>A banned name (.exe) was found.
>
>
>The mail originated from: <ieper@punch-gmbh.de>
>
>According to the 'Received:' trace, the message originated at:
> opfpswrhl.de (p508D0143.dip0.t-ipconnect.de [80.141.1.67])
>
>The message WAS NOT delivered to:
><user1@mydomain2.com>:
> 550 5.7.1 Message content rejected, id=01949-05 - BANNED: .exe
><user2@mydomain2.com>:
> 550 5.7.1 Message content rejected, id=01949-05 - BANNED: .exe
>
>The message has been quarantined as:
> /var/virusmails/virus-20041222-144539-01949-05
>>The file(1) utility identified the attachment as an .exe file; this is
>>based on the file itself, not its name.
>>You'll need to examine the file in quarantine to see why postfix
didn't
>>block it. Likely because the attachment name extension isn't on your
>>banned list.
>>
>>If you wish amavisd-new to accept files of this type, you'll need to
adjust
>>the setting of $banned_filename_re in your amavisd.conf file.
>>Look for something like:
>> qr'^\.(exe|zip|lha|tnef)$'i, # banned file(1)
types
>>and comment it out by inserting a "#" at the beginning of the line.
>>
>>--
>>Noel Jones
Ok, thank you. I tried using the file(1) utility on the file and got
something
like:
[root@mailfilter 13:45:02 ~]$ file
/var/virusmails/virus-20041222-161929-02148-08
/var/virusmails/virus-20041222-161929-02148-08: smtp mail text
[root@mailfilter 13:43:09 ~]$ file -i
/var/virusmails/virus-20041222-161929-02148-08
/var/virusmails/virus-20041222-161929-02148-08: message/rfc822 7bit
Is there any way to get the file attachment name so I can block it in
postfix? Sorry
but I am still somewhat new to this.
Jack
-------------------------------------------------------
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now.
http://productguide.itmanagersjournal.com/
_______________________________________________
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/
|
....