EFA is replacing .pdf's

[rickb813]

Good morning,
I have people beginning to notice that EFA is replacing important .pdf attachments.
where can I begin to resolve this?

RB

[darky83]

If the pdf is replaced it is replaced with a message containing the reason why do you have that available?

My guess is that the pdf files are removed because the sender uses double file extensions (myfile.v10.pdf)

By default E.F.A. blocks the file as it might be that an executable is named as a zip file (myfile.zip.exe) which could be an virus.
If this is the case, the best thing to do in my opinion is to instruct the user to not use dots in filenames, if that is not possible then you can allow this.

Edit the file: /etc/MailScanner/filename.rules.conf
at the bottom you will see the following:

Code: Select all

# Deny all other double file extensions. This catches any hidden filenames.
deny    \.[a-z][a-z0-9]{2,3}\s*\.[a-z0-9]{3}$   Found possible filename hiding                          Attempt to hide real filename extension

Replace deny with allow and reload mailscanner.