ConfigServer Scripts Forum

FAQ • Search • Login
Register
View unanswered posts | View active topics It is currently Wed Sep 08, 2010 5:13 pm

Board index » MailScanner and Exim » MailScanner

All times are UTC [ DST ]



Reply to topic  Page 1 of 1
  [ 6 posts ] 
Print view Previous topic | Next topic 
 Report: MailScanner: No programs allowed 
Author Message
ausdamo
Junior Member

Joined: Wed Jul 28, 2010 8:00 am
Posts: 5
Post Report: MailScanner: No programs allowed
Hi,

I read in the FAQ's (#12) that it may be an issue with the Linux File command if the file is being reported incorrectly. When I run File on these attachments (after uploading them to the server) they are reported as images, not programs.

Report: MailScanner: No programs allowed (ByMaxRibbonforNev.eps)
Report: MailScanner: No programs allowed (ByMaxRibbonforNev.psd)
Report: MailScanner: No programs allowed (._ByMaxRibbonforNev.psd)

How do I go about allowing these files?
Wed Jul 28, 2010 8:04 am
Profile
ausdamo
Junior Member

Joined: Wed Jul 28, 2010 8:00 am
Posts: 5
Post 
Is anyone able to offer any suggestions or direction on which settings to look at?
Thu Aug 05, 2010 2:44 am
Profile
Sarah
Moderator

Joined: Sat Dec 09, 2006 11:49 pm
Posts: 381
Post Re: Report: MailScanner: No programs allowed
It may be that the files are being wrongly identified by the Linux file command. You can test this by placing a copy of the attachment on the server and running this command in that directory:

file filename.psd

If the file command is giving the wrong filetype and attachments are being blocked that shouldn't be, you can use the MIME type for the filetype rules in addition.

Run "file -i" on the file on the server to find out the correct type to use, it will be the phrase before the semicolon, i.e.:

root@server[/]# file -i test.txt
test.txt: text/plain; charset=us-ascii

It's "text/plain". You would put this as the THIRD field in filetype.rules.conf file, i.e.:

allow<tab>text<tab>text/plain<tab>-<tab>-

So there are five fields in all, separated by tabs.

Alternatively you can list it in the MailScanner configuration by adding the MIME type to the "Allow File MIME Types = " setting.

NOTE: We can't make any guarantees about how this will work as we have not done any testing ourselves.
Mon Aug 09, 2010 9:49 pm
Profile
ausdamo
Junior Member

Joined: Wed Jul 28, 2010 8:00 am
Posts: 5
Post Re: Report: MailScanner: No programs allowed
Unfortunately this didn't work. I even added it to archives.filetype.rules.conf and performed a mailscanner reload each time I edited.

I'm at a loss to how to get these files accepted. It's only been happening for the past few weeks that I'm aware of. Is no-one else that's reading this experiencing the same issue?

Even when I release the file via quarantine it just gets blocked again. The email subject is "Warning: E-mail viruses detected"
Tue Aug 10, 2010 9:56 am
Profile
ausdamo
Junior Member

Joined: Wed Jul 28, 2010 8:00 am
Posts: 5
Post Re: Report: MailScanner: No programs allowed
Just adding to my last post. This is the contents of the .conf file (I added extra ... and .... to see which rule was triggered. It turns out to be the first rule with ...)

Code:
allow   text            -                       -
allow   \bscript        -                       -
allow   archive         -                       -
allow   postscript      -                       -
allow   EPS     image/x-photoshop       -       -
allow   PSD     application/octet-stream        -       -
deny    self-extract    No self-extracting archives     No self-extracting archives allowed
deny    executable      No executables          No programs allowed...
#EXAMPLE: deny  -       x-dosexec       No DOS executables      No DOS programs allowed
deny    ELF             No executables          No programs allowed....
deny    Registry        No Windows Registry entries     No Windows Registry files allowed

#deny   MPEG            No MPEG movies          No MPEG movies allowed
#deny   AVI             No AVI movies           No AVI movies allowed
#deny   MNG             No MNG/PNG movies       No MNG movies allowed
#deny   QuickTime       No QuickTime movies     No QuickTime movies allowed
#deny   ASF             No Windows media        No Windows media files allowed
#deny   metafont        No Windows Metafont drawings    No WMF drawings allowed


The PSD file is reported as "application/octet-stream" by file -i
Tue Aug 10, 2010 11:09 am
Profile
ausdamo
Junior Member

Joined: Wed Jul 28, 2010 8:00 am
Posts: 5
Post Re: Report: MailScanner: No programs allowed
Ok, after some more digging around in the mailscanner list it appears to be an issue with Archive::Zip. The following thread (you'll need to read the entire thread) details it nicely.

http://lists.mailscanner.info/pipermail ... 95861.html

Until it's sorted in a release of mailscanner I've just turned off scanning into archives (depth 0) to get around it :)
Tue Aug 10, 2010 11:49 am
Profile
Display posts from previous:  Sort by  
Reply to topic   Page 1 of 1
  [ 6 posts ] 

Board index » MailScanner and Exim » MailScanner

All times are UTC [ DST ]

You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum

Search for:
Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group.