Block filetype releaseable

Questions and answers about how to do stuff
Post Reply
ItemsGmbH
Posts: 3
Joined: 20 Dec 2018 14:53

Block filetype releaseable

Post by ItemsGmbH » 20 Dec 2018 15:22

Hi there

Following situation:
We receive tons of mails with .doc attachments containing a virus.
Now we configured our mailscanner to block all .doc files.

Is there a way to make the blocked file releaseable?
Now, if we need a file, we connect via ssh, copy the file & chown it. Then download it via ftp.
It would be great if we could just click at "release" ;)

I´m open for suggestions :-)

User avatar
shawniverson
Posts: 2821
Joined: 13 Jan 2014 23:30
Location: Rushville, Indiana, USA
Contact:

Re: Block filetype releaseable

Post by shawniverson » 22 Dec 2018 23:04

This is very doable, you have to tweak MailScanner and MailWatch though...let me find my notes and post the steps...
Version eFa 4.0.0 RC3 now available in testing repo. Come join us in advancing eFa!

User avatar
shawniverson
Posts: 2821
Joined: 13 Jan 2014 23:30
Location: Rushville, Indiana, USA
Contact:

Re: Block filetype releaseable

Post by shawniverson » 23 Dec 2018 14:12

/etc/MailScanner/MailScanner.conf

Code: Select all

# Do you want to store copies of the infected attachments and messages?
# This can also be the filename of a ruleset.
Quarantine Infections = yes
/var/www/html/mailscanner/conf.php

Code: Select all

define('QUARANTINE_USE_SENDMAIL', false);
Version eFa 4.0.0 RC3 now available in testing repo. Come join us in advancing eFa!

ItemsGmbH
Posts: 3
Joined: 20 Dec 2018 14:53

Re: Block filetype releaseable

Post by ItemsGmbH » 07 Jan 2019 12:13

It works. Thanks a lot :D

Is it possible to release the whole mail with the attachment again instead of sending an extra mail with only the attachment?

ItemsGmbH
Posts: 3
Joined: 20 Dec 2018 14:53

Re: Block filetype releaseable

Post by ItemsGmbH » 31 Jan 2019 10:32

*push*

User avatar
shawniverson
Posts: 2821
Joined: 13 Jan 2014 23:30
Location: Rushville, Indiana, USA
Contact:

Re: Block filetype releaseable

Post by shawniverson » 31 Jan 2019 12:49

I don't think MailWatch can release a blocked attachment using sendmail.
Version eFa 4.0.0 RC3 now available in testing repo. Come join us in advancing eFa!

Post Reply