Search found 862 matches

by Sarah
08 Aug 2022, 17:07
Forum: General Discussion (csf)
Topic: Can't Find IP Range In CC_DENY
Replies: 1
Views: 583

Re: Can't Find IP Range In CC_DENY

It is CC_DENY so you are blocking a country that contains that CIDR. You can't remove a range or an IP address from a CC blocklist. If the range has been allowed in csf, the allow *should* override the block.
by Sarah
03 Aug 2022, 09:01
Forum: MailScanner Front-End
Topic: deny filenames
Replies: 1
Views: 1390

Re: deny filenames

Hello, You need to use regular expressions in this field as shown in the examples in the description above the "Allow Filenames" setting. For instance, if you want to deny all .tar files, use this: .\tar$ This should block filenames with an extension of exactly tar and nothing else. Regard...
by Sarah
31 Jul 2022, 12:28
Forum: General Discussion (csf)
Topic: hook or custom script when LFD triggers
Replies: 2
Views: 948

Re: hook or custom script when LFD triggers

The option BLOCK_REPORT allows you to run your own external script whenever lfd blocks an IP. See the readme.txt for more information. If you want some action performed on other alerts besides blocks, there is no inbuilt way to do this. You could write your own daemon to monitor the lfd log, or scan...
by Sarah
14 Jun 2022, 09:03
Forum: MailScanner Front-End
Topic: rules no longer working
Replies: 13
Views: 3777

Re: rules no longer working

I wouldn't do the file command on the zip file but on the xls file. MailScanner will scan within zip archives. Otherwise you'll just block all zip files. Unfortunately I can't really help any further on how to use the results of the file command, you'll need to find this information elsewhere. Maybe...
by Sarah
13 Jun 2022, 18:27
Forum: MailScanner Front-End
Topic: rules no longer working
Replies: 13
Views: 3777

Re: rules no longer working

That is not going to work, you need to do what I suggested and check what the "file" command says about the file you want to block.
by Sarah
13 Jun 2022, 16:59
Forum: MailScanner Front-End
Topic: rules no longer working
Replies: 13
Views: 3777

Re: rules no longer working

You'd need to find out how the file command on your server classifies the type of file, and add it to the filetype.rules.conf and archives.filetype.rules.conf files in the correct format. Check those files for more information. As far as I know, you would need to run the "file" command aga...
by Sarah
10 Jun 2022, 17:53
Forum: MailScanner Front-End
Topic: rules no longer working
Replies: 13
Views: 3777

Re: rules no longer working

That isn't the complete report. But it sounds like it may be detecting the filetype rather than the filename, so you need to check that and possibly modify the filetype.rules.conf and/or archives.filetype.rules.conf as well. There is a knowledgebase article that should help you identify what is actu...
by Sarah
08 Jun 2022, 17:14
Forum: MailScanner Front-End
Topic: rules no longer working
Replies: 13
Views: 3777

Re: rules no longer working

What exactly is the MailScanner report for the blocked xslx files and the blocked xls files?
by Sarah
07 Jun 2022, 12:49
Forum: MailScanner Front-End
Topic: rules no longer working
Replies: 13
Views: 3777

Re: rules no longer working

Is it working now?
by Sarah
07 Jun 2022, 12:14
Forum: MailScanner Front-End
Topic: rules no longer working
Replies: 13
Views: 3777

Re: rules no longer working

Are you sure these files are being blocked because of their file name and not because of the file type? What is the message you are seeing in MailControl?

Have you ensured that you used [tab] characters between fields in the filename.rules.conf file and not spaces?