nick wrote:

> I have certain users who are sending microsoft access snapshots, .snp 
> files as well as a .doc in this instance, to clients, but recently, 
> after I upgraded my amavisd to 2.4.0-3, they're being blocked saying 
> that there's a banned file..

> In fact, for some reason, amavisd is seeing it as a .cab file (or is 
> seeing a .cab file included):


> BANNED CONTENTS ALERT

> Our content checker found
>      banned name: multipart/mixed | application/msword,.cab,prova.snp.doc |
>        .doc,_AccRpt_.snp

> Action: failed
> Status: 5.7.1
> Diagnostic-Code: smtp; 550-5.7.1 Rejected, id=28966-07 - BANNED:
>   550-5.7.1 multipart/mixed | application/msword,.cab,prova.snp.doc |
>   550 5.7.1 .doc,_AccRpt_.snp


> It doesn't seem to matter whether it's coming from outlook, thunderbird, 
> or a webmail app...

> I really don't want to allow .cab files, is there some other explanation 
>   as to why this would be hittin this rule?

It appears this is recognized as a .cab file. There was a bug in older
versions of amavisd-new that may have allowed .cab files to pass (not
be recognized) so this may be why you are seeing this for the first
time. I work around this type of problem by allowing the files I want.
For example, I block .zip/.rar files, but allow certain files to pass
before I do. This sample also shows where .snp files are allowed before
.cab files are blocked:

<...>
majority of banning goes here
<...>
 [ qr'.\.(doc|snp|ppt|xls|gdf|pdf)$'i => 0 ],    # allow this stuff
 qr'.\.(zip|rar)$'i,                     # block zip
 qr'^\.(exe-ms)$',                       # banned file(1) types
 qr'^\.(exe|lha|cab|tnef|dll)$',         # banned file(1) types
);

Also, users should be warned not to name files as double extensions:
(prova.snp.doc) as they may get banned for that reason.

Gary V



-------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
_______________________________________________
AMaViS-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/

Reply via email to