On 14.10.08 10:45, Carlos Williams wrote: > I have my Postfix email server set to reject .exe files as listed > below in 'mime_header_checks'
> >Oct 14 10:27:35 mail amavis[29316]: (29316-02) ESMTP::10024 > >/var/lib/amavis/tmp/amavis-20081014T102727-29316: <[EMAIL PROTECTED]> -> > ><[EMAIL PROTECTED]> SIZE=5611067 Received: >from mail.example.com > >([127.0.0.1]) by localhost (mail.example.com [127.0.0.1]) (amavisd-new, port > >10024) with ESMTP for <[EMAIL PROTECTED]>; Tue, 14 Oct 2008 10:27:35 -0400 > >(EDT) > > >Oct 14 10:27:37 mail amavis[29316]: (29316-02) p.path BANNED:1 [EMAIL > >PROTECTED]: "P=p003,L=1,M=multipart/mixed | > >P=p002,L=1/2,M=application/zip,T=zip,N=R46202.EXE.zip | > >P=p004,L=1/2/1,T=exe,T=exe-ms,N=R46202.EXE", > >matching_key="(?i-xsm:.\\.(exe|vbs|pif|scr|bat|cmd|com|cpl)$)" > > >Oct 14 10:27:40 mail amavis[29316]: (29316-02) local delivery: <[EMAIL > >PROTECTED]> -> <banned-quarantine>, > >mbx=/var/lib/amavis/virusmails/banned-hGYdZ1Z2LT6e > > Basically it appears to scan the "zip" file I send via email and > located the 'R46202.EXE' embedded into the zip file however it still > transmits the message rather than rejecting it. > My question is what am I doing wrong or what do I need to do in order > for Clamav to recognize that a archived attachment contains a banned > file extension and to reject it immediately? Basically you are contacting wrong list, try amavis list... -- Matus UHLAR - fantomas, [EMAIL PROTECTED] ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. It's now safe to throw off your computer. _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
