Re: block exe and other attachments

2013-09-17 Thread Stan Hoeppner
On 9/17/2013 5:08 AM, Rowland Onobrauche wrote: ... > Thanks to all that contributed to a possible resolution. I have decided to > allow the attachments and leave them to mailscanner to filter/quarantine as > some we are receiving are actually legit attachments. > At least if they are quarantined

Re: block exe and other attachments

2013-09-17 Thread Rowland Onobrauche
On 16 Sep 2013, at 15:39, Noel Jones wrote: > On 9/16/2013 6:41 AM, Rowland Onobrauche wrote: > >> >> Postfix config >> >> postconf -n >> smtpd_recipient_restrictions = permit_mynetworks, >> reject_invalid_hostname,reject_non_fqdn_hostname, >> reject_non_fqdn_sender,reject_non_

Re: block exe and other attachments

2013-09-16 Thread Rowland Onobrauche
On 16 Sep 2013, at 14:03, Wijatmoko U. Prayitno wrote: > On Mon, 16 Sep 2013 19:05:44 +0700 > "Wijatmoko U. Prayitno" wrote: > >> /^s*Content­(Disposition|Type).*names*=s*"?(.+.(scr|pif|bat|exe|dll|vbs))"?s*$/ >> REJECT Files attached to emails that contain or end in "$3" are prohibited >> on

Re: block exe and other attachments

2013-09-16 Thread Rowland Onobrauche
On 16 Sep 2013, at 15:39, Noel Jones wrote: > On 9/16/2013 6:41 AM, Rowland Onobrauche wrote: > >> >> Postfix config >> >> postconf -n >> smtpd_recipient_restrictions = permit_mynetworks, >> reject_invalid_hostname,reject_non_fqdn_hostname, >> reject_non_fqdn_sender,reject_non_

Re: block exe and other attachments

2013-09-16 Thread Noel Jones
On 9/16/2013 6:41 AM, Rowland Onobrauche wrote: > > Postfix config > > postconf -n > smtpd_recipient_restrictions = permit_mynetworks,reject_invalid_hostname, >reject_non_fqdn_hostname,reject_non_fqdn_sender, > reject_non_fqdn_recipient,reject_unknown_sender_domain, > re

Re: block exe and other attachments

2013-09-16 Thread Viktor Dukhovni
On Mon, Sep 16, 2013 at 07:05:44PM +0700, Wijatmoko U. Prayitno wrote: > Try.. > > /^s*Content?(Disposition|Type).*names*=s*"?(.+.(scr|pif|bat|exe|dll|vbs))"?s*$/ > REJECT Files attached to emails that contain or end in "$3" are prohibited > on this server as they may contain viruses. The file

Re: block exe and other attachments

2013-09-16 Thread Leonardo Rodrigues
Em 16/09/13 08:41, Rowland Onobrauche escreveu: cat mime_header_checks /name=[^>]*\.(scr|pif|bat|exe|dll|vbs)/ REJECT rules catches what they were written to catch which is not the same thing as you expect them to catch. If it's not catching what you want it to, that's because the rule

Re: block exe and other attachments

2013-09-16 Thread Wijatmoko U. Prayitno
On Mon, 16 Sep 2013 19:05:44 +0700 "Wijatmoko U. Prayitno" wrote: > /^s*Content­(Disposition|Type).*names*=s*"?(.+.(scr|pif|bat|exe|dll|vbs))"?s*$/ > REJECT Files attached to emails that contain or end in "$3" are prohibited > on this server as they may contain viruses. The file named "$2" was

Re: block exe and other attachments

2013-09-16 Thread DTNX Postmaster
On Sep 16, 2013, at 13:41, Rowland Onobrauche wrote: > Postfix config > > postconf -n [snip] > mime_header_checks = regexp:/etc/postfix/mime_header_checks > cat mime_header_checks > /name=[^>]*\.(scr|pif|bat|exe|dll|vbs)/ REJECT http://www.postfix.org/header_checks.5.html The manpage gives

Re: block exe and other attachments

2013-09-16 Thread Wijatmoko U. Prayitno
On Mon, 16 Sep 2013 12:41:08 +0100 Rowland Onobrauche wrote: > mime_header_checks = regexp:/etc/postfix/mime_header_checks > Ok. > cat mime_header_checks > /name=[^>]*\.(scr|pif|bat|exe|dll|vbs)/ REJECT > Try.. /^s*Content­(Disposition|Type).*names*=s*"?(.+.(scr|pif|bat|exe|dll|vbs))"?s*$/ RE

Re: block exe and other attachments

2013-09-16 Thread Rowland Onobrauche
On 16 Sep 2013, at 12:26, Larry Stone wrote: > > On Sep 16, 2013, at 6:01 AM, Rowland Onobrauche > wrote: > >> >> On 16 Sep 2013, at 11:38, Wietse Venema wrote: >> >>> Rowland Onobrauche: I am currently using mime_header_checks to block certain attachments with such a string - /na

Re: block exe and other attachments

2013-09-16 Thread Larry Stone
On Sep 16, 2013, at 6:01 AM, Rowland Onobrauche wrote: > > On 16 Sep 2013, at 11:38, Wietse Venema wrote: > >> Rowland Onobrauche: >>> I am currently using mime_header_checks to block certain attachments >>> with such a string - /name=[^>]*\.(scr|pif|bat|exe|dll|vbs)/ REJECT >>> This however d

RE: block exe and other attachments

2013-09-16 Thread James Day
> -Original Message- > From: owner-postfix-us...@postfix.org [mailto:owner-postfix- > us...@postfix.org] On Behalf Of Rowland Onobrauche > Sent: 16 September 2013 12:02 > To: Postfix users > Subject: Re: block exe and other attachments > > > On 16 Sep 2013, at

Re: block exe and other attachments

2013-09-16 Thread Leonardo Rodrigues
Em 16/09/13 08:01, Rowland Onobrauche escreveu: You made a configuration error. Unfortunately, I am not telepathic. Wietse Not very helpful. Does anyone else have any advice on this? given all the information (this is a joke) you provided, i would advice you to configure postfix

Re: block exe and other attachments

2013-09-16 Thread Wijatmoko U. Prayitno
On Mon, 16 Sep 2013 12:01:38 +0100 Rowland Onobrauche wrote: > > You made a configuration error. Unfortunately, I am > > not telepathic. > > > > Wietse > > Not very helpful. > Does anyone else have any advice on this? > show your configuration, as Wietse said we're not telepathic.. -- W

Re: block exe and other attachments

2013-09-16 Thread Rowland Onobrauche
On 16 Sep 2013, at 11:38, Wietse Venema wrote: > Rowland Onobrauche: >> I am currently using mime_header_checks to block certain attachments >> with such a string - /name=[^>]*\.(scr|pif|bat|exe|dll|vbs)/ REJECT >> This however does not stop me from receiving 100s of exes and other >> suspect att

Re: block exe and other attachments

2013-09-16 Thread Wietse Venema
Rowland Onobrauche: > I am currently using mime_header_checks to block certain attachments > with such a string - /name=[^>]*\.(scr|pif|bat|exe|dll|vbs)/ REJECT > This however does not stop me from receiving 100s of exes and other > suspect attachments - which are being blocked by mailscanner, > ho