Re: [AMaViS-user] banned files

cicciobello3-at-libero.it wrote:

>> cicciobello3 wrote:
>>
>> > Hi,
>> > I have a mail system based on postfix-2.2.9-1tr + amavisd-new-2.3.3-2tr + spamassassin running on trustix 3.0.
>>
>> > Amavis is configured to banned all emails containing executables files.
>> > Unfortunately, there is a strange kind of executable that I should let in.
>> > It is a not dangerous archive, but 'file' utility recognise as 'VAX-order 68K Blit (standalone) executable'.
>> > How should I setup this exception?
>> > Thanks.
>>
>> What is a sample file name? What did amavis give for the reason it was
>> banned?
>>
>> Gary V

> by the log, the message is:

> (250 2.7.1 Ok, discarded, id=13070-07 -
> BANNED: multipart/mixed | application/octet-stream,.exe,
> P029061B001073.FPR)

> thanks.

So it looks like the file name ends in .FPR. If this is correct,
the plan is to allow files with this extension before you block exe
files. So you would create a rule to allow FPR, then move where exe
is blocked to a position after you allow FPR. Something like this:

$banned_filename_re = new_RE(
<...other stuff...>
qr'.\.(vbs|pif|scr|bat|cmd|com|cpl)$'i, # banned extension - basic
# removed exe from here

[ qr'.\.(FPR)$'i => 0 ], # allow VAX FPR
qr'.\.(exe)$'i, # banned extension
qr'^\.(exe-ms)$', # banned file(1) types
qr'^\.(exe|lha|cab|dll)$', # banned file(1) types
);

Gary V


-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys -- and earn cash
http://www.techsay.com/default.php?p...rge&CID=DEVDEV
_______________________________________________
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/...fo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/