[SLE] MailScanner question

Hello,

Anyone here familiar with MailScanner? I have asked this question on the
MailScanner list, but I haven't gotten a reply. I know it must be a simple
solution, yet, for the life of me, I can't find the answer.

I want to quarantine password-protected file attachments, actually, any file
attachments that MailScanner determines as suspicious. Currently, the
attachments are being deleted and not quarantined <not good>. After looking
through
mailscanner.conf I found;

<snip>
# Reports and Responses
# ---------------------
#

# Do you want to store copies of the infected attachments and messages?
# This can also be the filename of a ruleset.
Quarantine Infections = yes
<snip>

However, an attachment was deleted and not stored in
/var/spool/MailScanner/quaratine/, according the text message;

This is a message from MailScanner E-Mail Virus Protection Service
----------------------------------------------------------------------
The original e-mail message contained potentially dangerous content,
which has been removed for your safety.

The content is dangerous as it is often used to spread viruses or to gain
personal or confidential information from you, such as passwords or credit
card numbers.

Due to limitations placed on us by the Regulation of Investigatory Powers
Act 2000, we were unable to keep a copy of the original attachment.

The content filters found this:
MailScanner: Message contained password-protected archive
~~~

Where in the conf can I fix this?

Many thanks in advance.


James

--
Check the headers for your unsubscription address
For additional commands send e-mail to suse-linux-e-help@xxxxxxxx
Also check the archives at http://lists.suse.com
Please read the FAQs: suse-linux-e-faq@xxxxxxxx

Relevant Pages

  • MailScanner question
    ... I want to quarantine password-protected file attachments, actually, any file ... attachments that MailScanner determines as suspicious. ... personal or confidential information from you, such as passwords or credit ...
    (RedHat)
  • RE: Question regarding MailScanner/SpamAssassin
    ... On Tue, 2003-08-05 at 13:46, Chris W. Parker wrote: ... > By default MailScanner blocks emails with certain extensions. ... > worth the fact that all the malicious attachments don't make it through ... thus alleviating the possibility of a user opening any ...
    (RedHat)
  • RE: Question regarding MailScanner/SpamAssassin
    ... What you are witnessing is MailScanner's file scanning rules in action. ... By default MailScanner blocks emails with certain extensions. ... extension they needs to rename the file with a .zip or .txt ... worth the fact that all the malicious attachments don't make it through ...
    (RedHat)
  • {Filename?} Returned mail: see transcript for details
    ... This message has had one or more attachments removed ... Warning:. ... This is a message from the MailScanner E-Mail Virus Protection Service ... The original e-mail attachment "attachment.scr" ...
    (comp.lang.python)
  • MailScanner issue
    ... my MailScanner has put into quarantine some messages ... pointint to a document or telling me a command would be fine :-) Thanks ... Robert Foster. ...
    (comp.os.linux.security)