Re: [Mimedefang] Why did my Filter Reject this?

2004-05-07 Thread Daniel Taylor
Mark Penkower wrote:
It appears that my filter bounced an email with a .doc extension.  I
have not instructed the filter to block this extension.  Please explain
why the filter bounced this, and what changes I can make to the filter
to allow this in the future.

MDLOG,i45JH3SL032136,bad_filename
,T. Rowe Price
letter.doc,application/msword,[EMAIL PROTECTED],[EMAIL PROTECTED]
enet.com,comment letters   

I thought that the the filter did not like the naming convention, so I
make a word document and called it:
T. Rowe Price letter.doc


What you are seeing here is the difference between
T. Rowe Price\nletter.doc and T. Rowe Price letter.doc
The newline is what it would be catching.
--
Daniel Taylor  VP OperationsVocal Laboratories, Inc.
[EMAIL PROTECTED]   http://www.vocalabs.com/(952)941-6580x203
___
Visit http://www.mimedefang.org and http://www.canit.ca
MIMEDefang mailing list
[EMAIL PROTECTED]
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang


[Mimedefang] Why did my Filter Reject this?

2004-05-06 Thread Mark Penkower
It appears that my filter bounced an email with a .doc extension.  I
have not instructed the filter to block this extension.  Please explain
why the filter bounced this, and what changes I can make to the filter
to allow this in the future.

Here is the message from the maillog file:

May  5 15:17:05 questnet sendmail[32136]: i45JH3SL032136:
from=[EMAIL PROTECTED]
, size=134617, class=0, nrcpts=1,
msgid=20F754F41050AA4784706FDA24ECF7EF69794C
@mail-4.ici.org, proto=ESMTP, daemon=Daemon0, relay=client45.somewhere
[xxx.xxx.xxx.xx]
May  5 15:17:05 questnet sendmail[32136]: i45JH3SL032136:
milter=mimedefang, act
ion=header, continue
May  5 15:17:05 questnet last message repeated 13 times
May  5 15:17:05 questnet sendmail[32136]: i45JH3SL032136:
milter=mimedefang, act
ion=eoh, continue
May  5 15:17:05 questnet sendmail[32136]: i45JH3SL032136:
milter=mimedefang, act
ion=body, continue
May  5 15:17:05 questnet last message repeated 2 times
May  5 15:17:05 questnet mimedefang.pl[23904]:
MDLOG,i45JH3SL032136,bad_filename
,T. Rowe Price
letter.doc,application/msword,[EMAIL PROTECTED],[EMAIL PROTECTED]
enet.com,comment letters   


I thought that the the filter did not like the naming convention, so I
make a word document and called it:

T. Rowe Price letter.doc


I was able to send it to myself without any issues.


Here is my filter:

/etc/mail/mimedefang-filter

# -*- Perl -*-
#***
#
# mimedefang-filter
#
# Suggested minimum-protection filter for Microsoft Windows clients,
plus
# SpamAssassin checks if SpamAssassin is installed.
#
# Copyright (C) 2002 Roaring Penguin Software Inc.
#
# This program may be distributed under the terms of the GNU General
# Public License, Version 2, or (at your option) any later version.
#
# $Id: suggested-minimum-filter-for-windows-clients,v 1.72 2003/11/14
21:33:20 dfs Exp $
#***

#***
# Set administrator's e-mail address here.  The administrator receives
# quarantine messages and is listed as the contact for site-wide
# MIMEDefang policy.  A good example would be
'[EMAIL PROTECTED]'
#***
$AdminAddress = '[EMAIL PROTECTED]';
$AdminName = Mark Penkower;

#***
# Set the e-mail address from which MIMEDefang quarantine warnings and
# user notifications appear to come.  A good example would be
# '[EMAIL PROTECTED]'.  Make sure to have an alias for this
# address if you want replies to it to work.
#***
$DaemonAddress = '[EMAIL PROTECTED]';

#***
# If you set $AddWarningsInline to 1, then MIMEDefang tries *very* hard
# to add warnings directly in the message body (text or html) rather
# than adding a separate WARNING.TXT MIME part.  If the message
# has no text or html part, then a separate MIME part is still used.
#***
$AddWarningsInline = 0;

#***
# To enable syslogging of virus and spam activity, add the following
# to the filter:
# md_graphdefang_log_enable();
# You may optionally provide a syslogging facility by passing an
# argument such as:  md_graphdefang_log_enable('local4');  If you do
this, be
# sure to setup the new syslog facility (probably in /etc/syslog.conf).
# An optional second argument causes a line of output to be produced
# for each recipient (if it is 1), or only a single summary line
# for all recipients (if it is 0.)  The default is 1.
# Comment this line out to disable logging.
#***
md_graphdefang_log_enable('mail', 1);

#***
# Uncomment this to block messages with more than 50 parts.  This will
# *NOT* work unless you're using Roaring Penguin's patched version
# of MIME tools, version MIME-tools-5.411a-RP-Patched-02 or later.
#
# WARNING: DO NOT SET THIS VARIABLE unless you're using at least
# MIME-tools-5.411a-RP-Patched-02; otherwise, your filter will fail.
#***
# $MaxMIMEParts = 50;

#***
# Set various stupid things your mail client does below.
#***

# Set the next one if your mail client cannot handle nested multipart
# messages.  DO NOT set this lightly; it will cause action_add_part to
# work rather strangely.  Leave it at zero, even for MS Outlook, unless
# you have serious problems.
$Stupidity{flatten} = 0;

# Set the