Block filetype releaseable

Questions and answers about how to do stuff
Post Reply
ItemsGmbH
Posts: 2
Joined: 20 Dec 2018 14:53

Block filetype releaseable

Post by ItemsGmbH » 20 Dec 2018 15:22

Hi there

Following situation:
We receive tons of mails with .doc attachments containing a virus.
Now we configured our mailscanner to block all .doc files.

Is there a way to make the blocked file releaseable?
Now, if we need a file, we connect via ssh, copy the file & chown it. Then download it via ftp.
It would be great if we could just click at "release" ;)

I´m open for suggestions :-)

User avatar
shawniverson
Posts: 2643
Joined: 13 Jan 2014 23:30
Location: Rushville, Indiana, USA
Contact:

Re: Block filetype releaseable

Post by shawniverson » 22 Dec 2018 23:04

This is very doable, you have to tweak MailScanner and MailWatch though...let me find my notes and post the steps...
Version 3.0.2.6 released! Update now to keep your eFa secure!

User avatar
shawniverson
Posts: 2643
Joined: 13 Jan 2014 23:30
Location: Rushville, Indiana, USA
Contact:

Re: Block filetype releaseable

Post by shawniverson » 23 Dec 2018 14:12

/etc/MailScanner/MailScanner.conf

Code: Select all

# Do you want to store copies of the infected attachments and messages?
# This can also be the filename of a ruleset.
Quarantine Infections = yes
/var/www/html/mailscanner/conf.php

Code: Select all

define('QUARANTINE_USE_SENDMAIL', false);
Version 3.0.2.6 released! Update now to keep your eFa secure!

ItemsGmbH
Posts: 2
Joined: 20 Dec 2018 14:53

Re: Block filetype releaseable

Post by ItemsGmbH » 07 Jan 2019 12:13

It works. Thanks a lot :D

Is it possible to release the whole mail with the attachment again instead of sending an extra mail with only the attachment?

Post Reply