Block filetype releaseable

Questions and answers about how to do stuff
Post Reply
ItemsGmbH
Posts: 21
Joined: 20 Dec 2018 14:53

Block filetype releaseable

Post by ItemsGmbH » 20 Dec 2018 15:22

Hi there

Following situation:
We receive tons of mails with .doc attachments containing a virus.
Now we configured our mailscanner to block all .doc files.

Is there a way to make the blocked file releaseable?
Now, if we need a file, we connect via ssh, copy the file & chown it. Then download it via ftp.
It would be great if we could just click at "release" ;)

I´m open for suggestions :-)

User avatar
shawniverson
Posts: 2994
Joined: 13 Jan 2014 23:30
Location: Indianapolis, Indiana USA
Contact:

Re: Block filetype releaseable

Post by shawniverson » 22 Dec 2018 23:04

This is very doable, you have to tweak MailScanner and MailWatch though...let me find my notes and post the steps...
Version eFa 4.0.2 now available!

User avatar
shawniverson
Posts: 2994
Joined: 13 Jan 2014 23:30
Location: Indianapolis, Indiana USA
Contact:

Re: Block filetype releaseable

Post by shawniverson » 23 Dec 2018 14:12

/etc/MailScanner/MailScanner.conf

Code: Select all

# Do you want to store copies of the infected attachments and messages?
# This can also be the filename of a ruleset.
Quarantine Infections = yes
/var/www/html/mailscanner/conf.php

Code: Select all

define('QUARANTINE_USE_SENDMAIL', false);
Version eFa 4.0.2 now available!

ItemsGmbH
Posts: 21
Joined: 20 Dec 2018 14:53

Re: Block filetype releaseable

Post by ItemsGmbH » 07 Jan 2019 12:13

It works. Thanks a lot :D

Is it possible to release the whole mail with the attachment again instead of sending an extra mail with only the attachment?

ItemsGmbH
Posts: 21
Joined: 20 Dec 2018 14:53

Re: Block filetype releaseable

Post by ItemsGmbH » 31 Jan 2019 10:32

*push*

User avatar
shawniverson
Posts: 2994
Joined: 13 Jan 2014 23:30
Location: Indianapolis, Indiana USA
Contact:

Re: Block filetype releaseable

Post by shawniverson » 31 Jan 2019 12:49

I don't think MailWatch can release a blocked attachment using sendmail.
Version eFa 4.0.2 now available!

Post Reply