Discussion:
MailScanner Digest, Vol 98, Issue 2
Tiago Eduardo Zacarias
2014-02-04 23:00:58 UTC
Permalink
nobody ?
Send MailScanner mailing list submissions to
mailscanner at lists.mailscanner.info
To subscribe or unsubscribe via the World Wide Web, visit
http://lists.mailscanner.info/mailman/listinfo/mailscanner
or, via email, send a message with subject or body 'help' to
mailscanner-request at lists.mailscanner.info
You can reach the person managing the list at
mailscanner-owner at lists.mailscanner.info
When replying, please edit your Subject line so it is more specific
than "Re: Contents of MailScanner digest..."
1. Re: MailScanner Digest, Vol 98, Issue 1 (Tiago Eduardo Zacarias)
2. Re: MailScanner Digest, Vol 98, Issue 1 (Tiago Eduardo Zacarias)
3. Re: Filter-Files (Mark Sapiro)
----------------------------------------------------------------------
Message: 1
Date: Sat, 01 Feb 2014 11:39:22 -0200
From: Tiago Eduardo Zacarias <tiago at tiagoti.com.br>
Subject: Re: MailScanner Digest, Vol 98, Issue 1
To: mailscanner at lists.mailscanner.info
Message-ID: <52ECF90A.6060902 at tiagoti.com.br>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Good morning Martin Hepworth
Restarted the service mailscanner and yet the policy described in
/etc/mailscanner/files- types.conf not and applied as observed in test
with attachments and compressed files pure. Example executables files
when attached in the policy even deny the mailscanner does not block,
already put debug in order to see something but does not return
anything, so that was checked informs entered the path of the program
/usr/bin/file now and then forwards it to the clamav anti-virus.
What may be you could give me a light, do not know if I can forward my
list to facilitate mailscanner.conf.
I thank you for your attention.
Att
Tiago Eduardo Zacarias
LPIC-1
Send MailScanner mailing list submissions to
mailscanner at lists.mailscanner.info
To subscribe or unsubscribe via the World Wide Web, visit
http://lists.mailscanner.info/mailman/listinfo/mailscanner
or, via email, send a message with subject or body 'help' to
mailscanner-request at lists.mailscanner.info
You can reach the person managing the list at
mailscanner-owner at lists.mailscanner.info
When replying, please edit your Subject line so it is more specific
than "Re: Contents of MailScanner digest..."
1. Filter-Files (Tiago Eduardo Zacarias)
2. Re: Filter-Files (Martin Hepworth)
----------------------------------------------------------------------
Message: 1
Date: Fri, 31 Jan 2014 13:09:53 -0200
From: Tiago Eduardo Zacarias <tiago at tiagoti.com.br>
Subject: Filter-Files
To: mailscanner at lists.mailscanner.info
Message-ID: <52EBBCC1.80600 at tiagoti.com.br>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Good Morning List MailScanner,
I ha a few days trying to accomplish in the file filter mailscanner
unsuccessfully already realized reinstalling it with all dependencies,
and even by setting the parameters to allow and deny files to the files
filetypes but I can not perform the filter in mailscanner if I send out
direct aqruivo example executable type attached zipped or not the
mailscanner blocks, like a support to this problem.
Attached the file mailscanner.
Thank you.
CPU = Pentium 4 3 Ghz
Postfix Version: 2.6.6-2.2
MailScanner Version: 4.84.6-1
------------------------------
Message: 2
Date: Fri, 31 Jan 2014 16:15:14 +0000
From: Martin Hepworth <maxsec at gmail.com>
Subject: Re: Filter-Files
To: MailScanner discussion <mailscanner at lists.mailscanner.info>
<CAGDKorLiogMp8QTGuHhbFcXaaotBVd4qh1LNHpgESU7nYvOMEg at mail.gmail.com>
Content-Type: text/plain; charset="iso-8859-1"
What have you tried with the filetypes thats doesnt work and did you start
and stop MailScanner after the change?
------------------------------
Message: 2
Date: Sat, 01 Feb 2014 11:49:36 -0200
From: Tiago Eduardo Zacarias <tiago at tiagoti.com.br>
Subject: Re: MailScanner Digest, Vol 98, Issue 1
To: mailscanner at lists.mailscanner.info
Message-ID: <52ECFB70.5040309 at tiagoti.com.br>
Content-Type: text/plain; charset=UTF-8; format=flowed
Good morning Martin Hepworth
Restarted the service mailscanner and yet the policy described in / etc
/ mailscanner / files - not types.conf and applied as observed in test
with attachments and compressed files pure . Example executables files
when attached in the policy even deny the mailscanner does not block ,
already put debug in order to see something but does not return anything
, so that was checked informs entered the path of the program / ??usr /
bin / file now and then forwards it to the clamav anti -virus .
Example of policy
# To disable this feature , set this to just " Filetype Rules = " or
September
# The location of the file command to a blank string .
Filetype Rules = % etc -dir % / filetype.rules.conf
allow text -
allow \ bscript -
allow archive -
allow postscript -
deny self -extract No self-extracting archives Self-extracting archives
The allowed
deny executable No executables No programs allowed
# EXAMPLE : deny - x - dosexec In DOS executables No DOS programs allowed
deny ELF No executables No programs allowed
rename Registry Windows Registry entries ( renamed ) Windows Registry
files ( renamed )
I thank you for your attention .
Att
Tiago Eduardo Zacarias
LPIC-1
Send MailScanner mailing list submissions to
mailscanner at lists.mailscanner.info
To subscribe or unsubscribe via the World Wide Web, visit
http://lists.mailscanner.info/mailman/listinfo/mailscanner
or, via email, send a message with subject or body 'help' to
mailscanner-request at lists.mailscanner.info
You can reach the person managing the list at
mailscanner-owner at lists.mailscanner.info
When replying, please edit your Subject line so it is more specific
than "Re: Contents of MailScanner digest..."
1. Filter-Files (Tiago Eduardo Zacarias)
2. Re: Filter-Files (Martin Hepworth)
----------------------------------------------------------------------
Message: 1
Date: Fri, 31 Jan 2014 13:09:53 -0200
From: Tiago Eduardo Zacarias <tiago at tiagoti.com.br>
Subject: Filter-Files
To: mailscanner at lists.mailscanner.info
Message-ID: <52EBBCC1.80600 at tiagoti.com.br>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Good Morning List MailScanner,
I ha a few days trying to accomplish in the file filter mailscanner
unsuccessfully already realized reinstalling it with all dependencies,
and even by setting the parameters to allow and deny files to the files
filetypes but I can not perform the filter in mailscanner if I send out
direct aqruivo example executable type attached zipped or not the
mailscanner blocks, like a support to this problem.
Attached the file mailscanner.
Thank you.
CPU = Pentium 4 3 Ghz
Postfix Version: 2.6.6-2.2
MailScanner Version: 4.84.6-1
------------------------------
Message: 2
Date: Fri, 31 Jan 2014 16:15:14 +0000
From: Martin Hepworth <maxsec at gmail.com>
Subject: Re: Filter-Files
To: MailScanner discussion <mailscanner at lists.mailscanner.info>
<CAGDKorLiogMp8QTGuHhbFcXaaotBVd4qh1LNHpgESU7nYvOMEg at mail.gmail.com>
Content-Type: text/plain; charset="iso-8859-1"
What have you tried with the filetypes thats doesnt work and did you start
and stop MailScanner after the change?
------------------------------
Message: 3
Date: Sat, 01 Feb 2014 18:59:16 -0800
From: Mark Sapiro <mark at msapiro.net>
Subject: Re: Filter-Files
To: mailscanner at lists.mailscanner.info
Message-ID: <52EDB484.7070809 at msapiro.net>
Content-Type: text/plain; charset=UTF-8
Restarted the service mailscanner and yet the policy described in / etc
/ mailscanner / files - not types.conf and applied as observed in test
with attachments and compressed files pure . Example executables files
when attached in the policy even deny the mailscanner does not block ,
already put debug in order to see something but does not return anything
, so that was checked informs entered the path of the program / ??usr /
bin / file now and then forwards it to the clamav anti -virus .
It is very difficult for me to understand exactly what you are trying to
say, but in your MailScanner.conf file do you have
File Command = /usr/bin/file
or some other path? what do you get when you invoke /usr/bin/file or
whatever path it is on the 'executable' file that is not blocked by
MailScanner?
Mark Sapiro
2014-02-04 23:31:51 UTC
Permalink
Post by Tiago Eduardo Zacarias
nobody ?
Please don't repost entire digests with digest subjects. Please quote
only that which is needed to establish the context of your reply and
provide a relevant subject
Post by Tiago Eduardo Zacarias
It is very difficult for me to understand exactly what you are trying to
say, but in your MailScanner.conf file do you have
File Command = /usr/bin/file
or some other path? what do you get when you invoke /usr/bin/file or
whatever path it is on the 'executable' file that is not blocked by
MailScanner?
What is your response to that?
--
Mark Sapiro <mark at msapiro.net> The highway is for gamblers,
San Francisco Bay Area, California better use your sense - B. Dylan
Tiago Eduardo Zacarias
2014-02-05 00:59:30 UTC
Permalink
And personal'm starting to see this mailscanner with other eyes, always
admired resources, but now I am faced with a problem that seems to be up
purposeful.
Send MailScanner mailing list submissions to
mailscanner at lists.mailscanner.info
To subscribe or unsubscribe via the World Wide Web, visit
http://lists.mailscanner.info/mailman/listinfo/mailscanner
or, via email, send a message with subject or body 'help' to
mailscanner-request at lists.mailscanner.info
You can reach the person managing the list at
mailscanner-owner at lists.mailscanner.info
When replying, please edit your Subject line so it is more specific
than "Re: Contents of MailScanner digest..."
1. Re: MailScanner Digest, Vol 98, Issue 1 (Tiago Eduardo Zacarias)
2. Re: MailScanner Digest, Vol 98, Issue 1 (Tiago Eduardo Zacarias)
3. Re: Filter-Files (Mark Sapiro)
----------------------------------------------------------------------
Message: 1
Date: Sat, 01 Feb 2014 11:39:22 -0200
From: Tiago Eduardo Zacarias <tiago at tiagoti.com.br>
Subject: Re: MailScanner Digest, Vol 98, Issue 1
To: mailscanner at lists.mailscanner.info
Message-ID: <52ECF90A.6060902 at tiagoti.com.br>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Good morning Martin Hepworth
Restarted the service mailscanner and yet the policy described in
/etc/mailscanner/files- types.conf not and applied as observed in test
with attachments and compressed files pure. Example executables files
when attached in the policy even deny the mailscanner does not block,
already put debug in order to see something but does not return
anything, so that was checked informs entered the path of the program
/usr/bin/file now and then forwards it to the clamav anti-virus.
What may be you could give me a light, do not know if I can forward my
list to facilitate mailscanner.conf.
I thank you for your attention.
Att
Tiago Eduardo Zacarias
LPIC-1
Send MailScanner mailing list submissions to
mailscanner at lists.mailscanner.info
To subscribe or unsubscribe via the World Wide Web, visit
http://lists.mailscanner.info/mailman/listinfo/mailscanner
or, via email, send a message with subject or body 'help' to
mailscanner-request at lists.mailscanner.info
You can reach the person managing the list at
mailscanner-owner at lists.mailscanner.info
When replying, please edit your Subject line so it is more specific
than "Re: Contents of MailScanner digest..."
1. Filter-Files (Tiago Eduardo Zacarias)
2. Re: Filter-Files (Martin Hepworth)
----------------------------------------------------------------------
Message: 1
Date: Fri, 31 Jan 2014 13:09:53 -0200
From: Tiago Eduardo Zacarias <tiago at tiagoti.com.br>
Subject: Filter-Files
To: mailscanner at lists.mailscanner.info
Message-ID: <52EBBCC1.80600 at tiagoti.com.br>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Good Morning List MailScanner,
I ha a few days trying to accomplish in the file filter mailscanner
unsuccessfully already realized reinstalling it with all dependencies,
and even by setting the parameters to allow and deny files to the files
filetypes but I can not perform the filter in mailscanner if I send out
direct aqruivo example executable type attached zipped or not the
mailscanner blocks, like a support to this problem.
Attached the file mailscanner.
Thank you.
CPU = Pentium 4 3 Ghz
Postfix Version: 2.6.6-2.2
MailScanner Version: 4.84.6-1
------------------------------
Message: 2
Date: Fri, 31 Jan 2014 16:15:14 +0000
From: Martin Hepworth <maxsec at gmail.com>
Subject: Re: Filter-Files
To: MailScanner discussion <mailscanner at lists.mailscanner.info>
<CAGDKorLiogMp8QTGuHhbFcXaaotBVd4qh1LNHpgESU7nYvOMEg at mail.gmail.com>
Content-Type: text/plain; charset="iso-8859-1"
What have you tried with the filetypes thats doesnt work and did you start
and stop MailScanner after the change?
------------------------------
Message: 2
Date: Sat, 01 Feb 2014 11:49:36 -0200
From: Tiago Eduardo Zacarias <tiago at tiagoti.com.br>
Subject: Re: MailScanner Digest, Vol 98, Issue 1
To: mailscanner at lists.mailscanner.info
Message-ID: <52ECFB70.5040309 at tiagoti.com.br>
Content-Type: text/plain; charset=UTF-8; format=flowed
Good morning Martin Hepworth
Restarted the service mailscanner and yet the policy described in / etc
/ mailscanner / files - not types.conf and applied as observed in test
with attachments and compressed files pure . Example executables files
when attached in the policy even deny the mailscanner does not block ,
already put debug in order to see something but does not return anything
, so that was checked informs entered the path of the program / ??usr /
bin / file now and then forwards it to the clamav anti -virus .
Example of policy
# To disable this feature , set this to just " Filetype Rules = " or
September
# The location of the file command to a blank string .
Filetype Rules = % etc -dir % / filetype.rules.conf
allow text -
allow \ bscript -
allow archive -
allow postscript -
deny self -extract No self-extracting archives Self-extracting archives
The allowed
deny executable No executables No programs allowed
# EXAMPLE : deny - x - dosexec In DOS executables No DOS programs allowed
deny ELF No executables No programs allowed
rename Registry Windows Registry entries ( renamed ) Windows Registry
files ( renamed )
I thank you for your attention .
Att
Tiago Eduardo Zacarias
LPIC-1
Send MailScanner mailing list submissions to
mailscanner at lists.mailscanner.info
To subscribe or unsubscribe via the World Wide Web, visit
http://lists.mailscanner.info/mailman/listinfo/mailscanner
or, via email, send a message with subject or body 'help' to
mailscanner-request at lists.mailscanner.info
You can reach the person managing the list at
mailscanner-owner at lists.mailscanner.info
When replying, please edit your Subject line so it is more specific
than "Re: Contents of MailScanner digest..."
1. Filter-Files (Tiago Eduardo Zacarias)
2. Re: Filter-Files (Martin Hepworth)
----------------------------------------------------------------------
Message: 1
Date: Fri, 31 Jan 2014 13:09:53 -0200
From: Tiago Eduardo Zacarias <tiago at tiagoti.com.br>
Subject: Filter-Files
To: mailscanner at lists.mailscanner.info
Message-ID: <52EBBCC1.80600 at tiagoti.com.br>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Good Morning List MailScanner,
I ha a few days trying to accomplish in the file filter mailscanner
unsuccessfully already realized reinstalling it with all dependencies,
and even by setting the parameters to allow and deny files to the files
filetypes but I can not perform the filter in mailscanner if I send out
direct aqruivo example executable type attached zipped or not the
mailscanner blocks, like a support to this problem.
Attached the file mailscanner.
Thank you.
CPU = Pentium 4 3 Ghz
Postfix Version: 2.6.6-2.2
MailScanner Version: 4.84.6-1
------------------------------
Message: 2
Date: Fri, 31 Jan 2014 16:15:14 +0000
From: Martin Hepworth <maxsec at gmail.com>
Subject: Re: Filter-Files
To: MailScanner discussion <mailscanner at lists.mailscanner.info>
<CAGDKorLiogMp8QTGuHhbFcXaaotBVd4qh1LNHpgESU7nYvOMEg at mail.gmail.com>
Content-Type: text/plain; charset="iso-8859-1"
What have you tried with the filetypes thats doesnt work and did you start
and stop MailScanner after the change?
------------------------------
Message: 3
Date: Sat, 01 Feb 2014 18:59:16 -0800
From: Mark Sapiro <mark at msapiro.net>
Subject: Re: Filter-Files
To: mailscanner at lists.mailscanner.info
Message-ID: <52EDB484.7070809 at msapiro.net>
Content-Type: text/plain; charset=UTF-8
Restarted the service mailscanner and yet the policy described in / etc
/ mailscanner / files - not types.conf and applied as observed in test
with attachments and compressed files pure . Example executables files
when attached in the policy even deny the mailscanner does not block ,
already put debug in order to see something but does not return anything
, so that was checked informs entered the path of the program / ??usr /
bin / file now and then forwards it to the clamav anti -virus .
It is very difficult for me to understand exactly what you are trying to
say, but in your MailScanner.conf file do you have
File Command = /usr/bin/file
or some other path? what do you get when you invoke /usr/bin/file or
whatever path it is on the 'executable' file that is not blocked by
MailScanner?
Alex Neuman
2014-02-05 03:06:01 UTC
Permalink
On Tue, Feb 4, 2014 at 6:00 PM, Tiago Eduardo Zacarias
<tiago at tiagoti.com.br<https://app.getsignals.com/link?url=mailto%3Atiago%40tiagoti.com.br&ukey=agxzfnNpZ25hbHNjcnhyGAsSC1VzZXJQcm9maWxlGICAgKCUyroKDA&k=8018c264-a374-4bbc-9fec-c5fd831e95e7>
Post by Tiago Eduardo Zacarias
nobody ?
Nobody understood your previous message as it was very badly translated.
Try using google translate at translate.google.com, or message me off list.
I don't speak portuguese, but since Spanish is my native language it's a
little closer to Portuguese than English is.



*Alex Neuman van der Hans*Reliant Technologies / Vida Digital
http://vidadigital.com.pa/<https://app.getsignals.com/link?url=http%3A%2F%2Fvidadigital.com.pa%2F&ukey=agxzfnNpZ25hbHNjcnhyGAsSC1VzZXJQcm9maWxlGICAgKCUyroKDA&k=cad0880c-2322-45e2-fe89-116ba8052a97>

Mobile: +507-6781-9505
Work: +507-832-6725
Work (USA): +1-440-253-9789

Follow *@AlexNeuman
<https://app.getsignals.com/link?url=https%3A%2F%2Ftwitter.com%2Falexneuman&ukey=agxzfnNpZ25hbHNjcnhyGAsSC1VzZXJQcm9maWxlGICAgKCUyroKDA&k=19ef64f2-4ddb-4712-c6b8-43eb060e6354>*
on
Twitter
Like Vida Digital<https://app.getsignals.com/link?url=https%3A%2F%2Ffacebook.com%2Fvidadigital%2F&ukey=agxzfnNpZ25hbHNjcnhyGAsSC1VzZXJQcm9maWxlGICAgKCUyroKDA&k=76dcb44e-5f25-4ce9-cd88-37236f4b75ca>
on
Facebook
Follow VidaDigital<https://app.getsignals.com/link?url=http%3A%2F%2Finstagram.com%2Fvidadigital&ukey=agxzfnNpZ25hbHNjcnhyGAsSC1VzZXJQcm9maWxlGICAgKCUyroKDA&k=b131f0e7-a796-479c-b0a9-afca5c013390>
on
Instagram
Subscribe to Vida
Digital<https://app.getsignals.com/link?url=https%3A%2F%2Fyoutube.com%2Freliantpty&ukey=agxzfnNpZ25hbHNjcnhyGAsSC1VzZXJQcm9maWxlGICAgKCUyroKDA&k=29086f38-9b42-4817-baa1-39bc0128ef96>
on
Youtube
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20140204/d541fe79/attachment.html
Loading...