Page 1 of 1

Problem with filename.rules.conf

Posted: 30 Jan 2019, 11:38
by dzamanakos
Hi, today i've noticed that an email passed with a .jar attachment.

In my configuration i have:
File "Attachment checking" enabled
Default for virus scanning = yes

In mailscanner configuration i've the default setting for
Filename Rules = %rules-dir%/filename.rules.rules

with :

From: 127.0.0.1 and From: postmaster@domain.com /usr/mailscanner/etc/filename.no.rules.conf # postmaster
FromOrTo: default /usr/mailscanner/etc/filename.rules.conf


and in filename.rules.conf i have :
deny \.jar$ Possible java virus Java files are often malicious

but when i send, or someone send me a ,jar file it's passing to inbox.
What can i check?
best regards,

Re: Problem with filename.rules.conf

Posted: 30 Jan 2019, 17:21
by sawbuck
Are the entries in filename.rules.conf separated by "tabs" and not just spaces?

Did you reload MS after making rule changes?

Re: Problem with filename.rules.conf

Posted: 30 Jan 2019, 17:39
by dzamanakos
It was a space.
Thank you for your help.

Best regards,

Re: Problem with filename.rules.conf

Posted: 08 May 2019, 07:54
by Poojakhana
I had the same issue..Excellent answer. Thanks for this sharing!