Attempt to hide real filename extension problem

Questions and answers about how to do stuff
Post Reply
omer
Posts: 39
Joined: 11 Oct 2017 15:23

Attempt to hide real filename extension problem

Post by omer »

Hello,

There is a .rar file attached to the email sent by a user. However, there is a file with the ".shp.xml" extension in the .rar file.
But EFA prevents this. No matter what I did, it didn't work. I read all the messages I found, but there was no solution.

I added different variations to try on lines 47, 48, 49 and 59 in the filename.rules.conf content, but it didn't work.

https://pastebin.com/NLueLp4z

What should I do to you?

Thank you.
henk
Posts: 511
Joined: 14 Dec 2015 22:16
Location: Netherlands
Contact:

Re: Attempt to hide real filename extension problem

Post by henk »

The 'allow \.shp\.xml' looks fine to me

Restarted MailScanner?
“We are stuck with technology when what we really want is just stuff that works.” -Douglas Adams
omer
Posts: 39
Joined: 11 Oct 2017 15:23

Re: Attempt to hide real filename extension problem

Post by omer »

Yes, I restarted the services but it did not help.
User avatar
Aryfir
Posts: 20
Joined: 04 Sep 2020 13:52

Re: Attempt to hide real filename extension problem

Post by Aryfir »

What about using only one line on your filename.rules.conf:

Code: Select all

allow       \.shp\.xml$     -          -
(the spaces between the fields must be TAB characters and not SPACES)
and delete the others (prevents MailScanner from having problems)

CMIIW, if your file is on rar, add that line too on archives.filename.rules.conf
omer
Posts: 39
Joined: 11 Oct 2017 15:23

Re: Attempt to hide real filename extension problem

Post by omer »

Hello,

Thank you for your help.

When I edited this file "archives.filename.rules.conf", the rule worked.

Thank you.
Post Reply