Block filetype releaseable

Questions and answers about how to do stuff
Post Reply
ItemsGmbH
Posts: 24
Joined: 20 Dec 2018 14:53

Block filetype releaseable

Post by ItemsGmbH »

Hi there

Following situation:
We receive tons of mails with .doc attachments containing a virus.
Now we configured our mailscanner to block all .doc files.

Is there a way to make the blocked file releaseable?
Now, if we need a file, we connect via ssh, copy the file & chown it. Then download it via ftp.
It would be great if we could just click at "release" ;)

I´m open for suggestions :-)
User avatar
shawniverson
Posts: 3644
Joined: 13 Jan 2014 23:30
Location: Indianapolis, Indiana USA
Contact:

Re: Block filetype releaseable

Post by shawniverson »

This is very doable, you have to tweak MailScanner and MailWatch though...let me find my notes and post the steps...
User avatar
shawniverson
Posts: 3644
Joined: 13 Jan 2014 23:30
Location: Indianapolis, Indiana USA
Contact:

Re: Block filetype releaseable

Post by shawniverson »

/etc/MailScanner/MailScanner.conf

Code: Select all

# Do you want to store copies of the infected attachments and messages?
# This can also be the filename of a ruleset.
Quarantine Infections = yes
/var/www/html/mailscanner/conf.php

Code: Select all

define('QUARANTINE_USE_SENDMAIL', false);
ItemsGmbH
Posts: 24
Joined: 20 Dec 2018 14:53

Re: Block filetype releaseable

Post by ItemsGmbH »

It works. Thanks a lot :D

Is it possible to release the whole mail with the attachment again instead of sending an extra mail with only the attachment?
ItemsGmbH
Posts: 24
Joined: 20 Dec 2018 14:53

Re: Block filetype releaseable

Post by ItemsGmbH »

*push*
User avatar
shawniverson
Posts: 3644
Joined: 13 Jan 2014 23:30
Location: Indianapolis, Indiana USA
Contact:

Re: Block filetype releaseable

Post by shawniverson »

I don't think MailWatch can release a blocked attachment using sendmail.
Post Reply