Want to win a PS4? Go Premium and enter to win our High-Tech Treats giveaway. Enter to Win

x
?
Solved

Amavis-new is blocking Office 2007 file formats.

Posted on 2009-07-13
3
Medium Priority
?
2,901 Views
Last Modified: 2013-12-09
We have a dedicated SPAM filter running Linux Debian (Etch) implementing Postfix/Amavis/SA/Clamd. Amavis-new is blocking new MS Office 2007 with messages similar to the following:

X-Amavis-Alert: BANNED, message contains part: multipart/mixed | application/octet-stream,.zip

My company has asked me to allow docx / xlsx / pptx fomats as attachments. How should I do this without opening a huge security hole?
0
Comment
Question by:icsbudapest
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
3 Comments
 
LVL 4

Accepted Solution

by:
OliverRahner earned 2000 total points
ID: 24838659
Find the line starting with "$banned_filename_re" inside your amavisd config file(s).

Add the following directly under this line:

  [ qr'(\.xlsx|\.docx|\.pptx)$' => 0 ], # allow MS Office 2007 plain files

This should be rather safe, as Office 2007 only allows macros to be placed inside files with an extension which ends in 'm' (.xlsm, .docm etc).
0
 

Author Comment

by:icsbudapest
ID: 24838712
Ah, for some reason I missed that about the macro format. Thanks for the quick tip. I will send some test messages and see if it is working.

0
 

Author Comment

by:icsbudapest
ID: 24838786
All seems to be working. attachments are going through without a problem. Thanks again.
0

Featured Post

Get free NFR key for Veeam Availability Suite 9.5

Veeam is happy to provide a free NFR license (1 year, 2 sockets) to all certified IT Pros. The license allows for the non-production use of Veeam Availability Suite v9.5 in your home lab, without any feature limitations. It works for both VMware and Hyper-V environments

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Utilizing an array to gracefully append to a list of EmailAddresses
As tax season makes its return, so does the increase in cyber crime and tax refund phishing that comes with it
The basic steps you have just learned will be implemented in this video. The basic steps are shown to configure an Exchange DAG in a live working Exchange Server Environment and manage the same (Exchange Server 2010 Software is used in a Windows Ser…
Nobody understands Phishing better than an anti-spam company. That’s why we are providing Phishing Awareness Training to our customers. According to a report by Verizon, only 3% of targeted users report malicious emails to management. With compan…

610 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question