Leonard Tulipan wrote:
Now, somebody with a forged FROM sends us a virus (current example cat.cpl ), it gets blocked by the perl-scanner part of qmail, and a warning mail is sent.
This is of course unwanted, since in that example it's a virus, not some funny game or stuff.
So, can I force qmail-scanner to also scan certain attachements, even though the already got blocked?
Or can I somehow quitely block certain attachements (like .cpl, .scr and other exotic things, which should not normally be sent)
You can "quietly block attachments". All you need to do is ensure the word "virus" shows up in the Policy statement, e.g.
change
.scr 0 SCR files not allowed per Company security policy
to
.scr<TAB>0<TAB>potential viruses - blocked
Q-S looks for the string "virus" in the description area and will treat that as a virus-block instead of a policy-block (which involves notifying the sender)
Hmmm. That isn't documented in the quaratine-attachments.txt file... Better fix that
-- Cheers
Jason Haar Information Security Manager, Trimble Navigation Ltd. Phone: +64 3 9635 377 Fax: +64 3 9635 417 PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB FE1D 66D1
------------------------------------------------------- This SF.Net email is sponsored by Oracle Space Sweepstakes Want to be the first software developer in space? Enter now for the Oracle Space Sweepstakes! http://ads.osdn.com/?ad_id=7412&alloc_id=16344&op=click _______________________________________________ Qmail-scanner-general mailing list Qmail-scanner-general@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general
