Solved

Why the attachment being blocked?

Posted on 2011-03-03
7
923 Views
Last Modified: 2012-05-11
This is using MailScanner on CentOs. There is an external party tried to send us, and in return, mail being bounced back with the error messages as follows:

This is a message from the MailScanner E-Mail Virus Protection Service
----------------------------------------------------------------------
The original e-mail attachment "%112233aaccbb.htm"
is on the list of unacceptable attachments for this site and has been
replaced by this warning message.

If you wish to receive a copy of the original attachment, please
e-mail helpdesk and include the whole of this message
in your request. Alternatively, you can call them, with
the contents of this message to hand when you call.

At Thu Mar  3 22:56:39 2011 the virus scanner said:
   MailScanner: Filename trying to hide its real type (%aabbcc1122.htm)

Note to Help Desk: Look on the abc networks (smtp.abc.com) MailScanner in /var/spool/MailScanner/quarantine/20110303 (message p23EuYdx006926).
--
Postmaster
abc networks

What's wrong with the attachment? How to solve the problem?

0
Comment
Question by:Balack
  • 4
  • 2
7 Comments
 
LVL 16

Expert Comment

by:santoshmotwani
ID: 35033002
can you please paste output of

/etc/MailScanner/filename.rules.conf
/etc/MailScanner/filename.allow.all.conf
0
 

Author Comment

by:Balack
ID: 35033624
Hi santoshmotwani,

Filename.allow.all.conf:

   # This ruleset will allow all attached files to pass
   allow      .*      -      -

For filename.rules.conf, see the attached

 
filename.rules.conf.txt
0
 
LVL 12

Accepted Solution

by:
mccracky earned 500 total points
ID: 35037004
At a quick glance it seems that it is hitting the CLSID rule:

# Deny filenames containing CLSID's
deny      \{[a-hA-H0-9-]{25,}\}      Filename trying to hide its real type. Files containing  CLSID's are trying to hide their real type

Examples:
A977FF0C-8757-4E76-8533-482F91946233
000209FF-0000-0000-C000-000000000046

Can the file be renamed and sent?
0
What is SQL Server and how does it work?

The purpose of this paper is to provide you background on SQL Server. It’s your self-study guide for learning fundamentals. It includes both the history of SQL and its technical basics. Concepts and definitions will form the solid foundation of your future DBA expertise.

 

Author Comment

by:Balack
ID: 35038277
yes, it can.
0
 

Author Comment

by:Balack
ID: 35038283
It is normally *.htm file.
0
 
LVL 12

Expert Comment

by:mccracky
ID: 35039471
I don't think it's the .htm part, but the first part that is just 112233aabbcc, but not sure.  
0
 

Author Closing Comment

by:Balack
ID: 35078175
good
0

Featured Post

VMware Disaster Recovery and Data Protection

In this expert guide, you’ll learn about the components of a Modern Data Center. You will use cases for the value-added capabilities of Veeam®, including combining backup and replication for VMware disaster recovery and using replication for data center migration.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

How many times have you wanted to quickly do the same thing to a list but found yourself typing it again and again? I first figured out a small time saver with the up arrow to recall the last command but that can only get you so far if you have a bi…
If you have a server on collocation with the super-fast CPU, that doesn't mean that you get it running at full power. Here is a preamble. When doing inventory of Linux servers, that I'm administering, I've found that some of them are running on l…
Learn how to navigate the file tree with the shell. Use pwd to print the current working directory: Use ls to list a directory's contents: Use cd to change to a new directory: Use wildcards instead of typing out long directory names: Use ../ to move…
Connecting to an Amazon Linux EC2 Instance from Windows Using PuTTY.

863 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

23 Experts available now in Live!

Get 1:1 Help Now