> From my log: > Feb 9 15:56:05 mail amavis[32389]: (32389-19) p004 1 Content-Type: > multipart/mixed > Feb 9 15:56:05 mail amavis[32389]: (32389-19) p005 1/1 Content-Type: > multipart/alternative > Feb 9 15:56:05 mail amavis[32389]: (32389-19) p001 1/1/1 Content-Type: > text/plain, size: 11 B, name: > Feb 9 15:56:05 mail amavis[32389]: (32389-19) p002 1/1/2 Content-Type: > text/html, size: 708 B, name: > Feb 9 15:56:05 mail amavis[32389]: (32389-19) p003 1/2 Content-Type: > application/octet-stream, size: 4602930 B, name: 20091211_1553.ZIP > Feb 9 15:56:06 mail amavis[32389]: (32389-19) do_unzip: p003, members > of zero length, archive retained > Feb 9 15:56:07 mail amavis[32389]: (32389-19) p.path BANNED:1 > recipi...@charite.de: "P=p004,L=1,M=multipart/mixed | > P=p003,L=1/2,M=application/octet-stream,T=zip,N=20091211_1553.ZIP | > P=p060,L=1/2/55,T=exe,T=dll,N=20091211_1553/Bin/COPRA.COPRA6.HL7.QRS.dl > l", matching_key="(?i- > xsm:\\.[^./]{3}\\.(exe|vbs|pif|scr|bat|cmd|com|dll)\\.?$)" > Feb 9 15:56:12 mail amavis[32389]: (32389-19) Blocked BANNED > (.exe,.dll,20091211_1553/Bin/COPRA.COPRA6.HL7.QRS.dll), [195.4.92.96] > [194.97.107.139] <sen...@freenet.de> -> <recipi...@charite.de>, > Message-ID: <8c6c2e270b9e1ff1d0af46475d57c...@email.freenet.de>, > mail_id: Dq1Zv1DHmB8Z, Hits: -, size: 6301724, 6661 ms
This rule: "(?i-xsm:\\.[^./]{3}\\.(exe|vbs|pif|scr|bat|cmd|com|dll)\\.?$)" Matches .exe, .dll, .pif etc. files, thereby it matches the 20091211_1553/Bin/COPRA.COPRA6.HL7.QRS.dll file contained into the zip. Giampaolo > > -- > Ralf Hildebrandt > Geschäftsbereich IT | Abteilung Netzwerk > Charité - Universitätsmedizin Berlin > Campus Benjamin Franklin > Hindenburgdamm 30 | D-12203 Berlin > Tel. +49 30 450 570 155 | Fax: +49 30 450 570 962 > ralf.hildebra...@charite.de | http://www.charite.de > > > ----------------------------------------------------------------------- > ------- > The Planet: dedicated and managed hosting, cloud storage, colocation > Stay online with enterprise data centers and the best network in the > business > Choose flexible plans and management services without long-term > contracts > Personal 24x7 support from experience hosting pros just a phone call > away. > http://p.sf.net/sfu/theplanet-com > _______________________________________________ > AMaViS-user mailing list > AMaViS-user@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/amavis-user > AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 > AMaViS-HowTos:http://www.amavis.org/howto/ ------------------------------------------------------------------------------ The Planet: dedicated and managed hosting, cloud storage, colocation Stay online with enterprise data centers and the best network in the business Choose flexible plans and management services without long-term contracts Personal 24x7 support from experience hosting pros just a phone call away. http://p.sf.net/sfu/theplanet-com _______________________________________________ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/