Page 1 of 1

Block filetype releaseable

Posted: 20 Dec 2018 15:22
by ItemsGmbH
Hi there

Following situation:
We receive tons of mails with .doc attachments containing a virus.
Now we configured our mailscanner to block all .doc files.

Is there a way to make the blocked file releaseable?
Now, if we need a file, we connect via ssh, copy the file & chown it. Then download it via ftp.
It would be great if we could just click at "release" ;)

I´m open for suggestions :-)

Re: Block filetype releaseable

Posted: 22 Dec 2018 23:04
by shawniverson
This is very doable, you have to tweak MailScanner and MailWatch though...let me find my notes and post the steps...

Re: Block filetype releaseable

Posted: 23 Dec 2018 14:12
by shawniverson
/etc/MailScanner/MailScanner.conf

Code: Select all

# Do you want to store copies of the infected attachments and messages?
# This can also be the filename of a ruleset.
Quarantine Infections = yes
/var/www/html/mailscanner/conf.php

Code: Select all

define('QUARANTINE_USE_SENDMAIL', false);

Re: Block filetype releaseable

Posted: 07 Jan 2019 12:13
by ItemsGmbH
It works. Thanks a lot :D

Is it possible to release the whole mail with the attachment again instead of sending an extra mail with only the attachment?

Re: Block filetype releaseable

Posted: 31 Jan 2019 10:32
by ItemsGmbH
*push*

Re: Block filetype releaseable

Posted: 31 Jan 2019 12:49
by shawniverson
I don't think MailWatch can release a blocked attachment using sendmail.