[SOLVED] Spam/Virus block

alphatest · 07-05-2011, 03:13 AM

Hi,

how to unblock email with attachment .zip should be all attachment through to my email

i have below message when people sent me email to my domain

Warning: This message has had one or more attachments removed
Warning: (the entire message).
Warning: Please read the "Apex-Attachment-Warning.txt" attachment(s) for more information.

This is a message from the MailScanner E-Mail Virus Protection Service
----------------------------------------------------------------------
The original e-mail message contained potentially dangerous content,
which has been removed for your safety.

The content is dangerous as it is often used to spread viruses or to gain
personal or confidential information from you, such as passwords or credit
card numbers.

can anyone help me

thanks

ButterflyMelissa · 07-05-2011, 04:34 AM

Hi,

More info, please. POP3 based? Webmail? What service? Where did this warning message come from? Your system? The service? Did you expect this mail? Is the origin of the mail trustworthy?

Thanks

Thor

repo · 07-05-2011, 05:04 AM

Edit

Code:

/usr/mailscanner/etc/MailScanner.conf

set

Code:

Maximum Archive Depth = 0

In filetype.rules.conf
set

Code:

allow \.zip$ - -
#deny self-extract No self-extracting archives No self-extracting archives allowed

restart mailscanner

Kind regards

alphatest · 07-05-2011, 08:52 AM

Hi,

yes the sender are trustworthy and actually the email is not virus and dangerous, it's just send zip file attachement.
why this happen, i worried if allow the .zip then virus mail will through...

thanks

repo · 07-05-2011, 10:16 AM

It will still scan the zipfile, but not block the extentions in the file.

Kind regards

alphatest · 07-05-2011, 09:46 PM

hi,

still problem when people sending me email with zip attachment, i use centos for mailscanner

can anyone help me on this.

thanks in advance

repo · 07-06-2011, 03:21 AM

You marked the thread solved.
What did you try, and what are the problems, error messages.

Kind regards

sundialsvcs · 07-06-2011, 07:31 AM

I believe that it is pointless to try to block rogue programs by content inspection. The most important concerns, in my mind are:

Be sure that no one is ever an "administrator" of their machine.
Be sure that every machine is backed up.

alphatest · 07-06-2011, 12:07 PM

i just modified setting on mailscanner.conf..

zip attachment =no convert to
zip attachment =yes

that all

thank all

repo · 07-06-2011, 12:09 PM

Try the suggestion in post 3

Kind regards