Page 1 of 1

Attempt to hide real filename extension problem

Posted: 13 Nov 2023 08:21
by omer
Hello,

There is a .rar file attached to the email sent by a user. However, there is a file with the ".shp.xml" extension in the .rar file.
But EFA prevents this. No matter what I did, it didn't work. I read all the messages I found, but there was no solution.

I added different variations to try on lines 47, 48, 49 and 59 in the filename.rules.conf content, but it didn't work.

https://pastebin.com/NLueLp4z

What should I do to you?

Thank you.

Re: Attempt to hide real filename extension problem

Posted: 13 Nov 2023 14:04
by henk
The 'allow \.shp\.xml' looks fine to me

Restarted MailScanner?

Re: Attempt to hide real filename extension problem

Posted: 15 Nov 2023 11:46
by omer
Yes, I restarted the services but it did not help.

Re: Attempt to hide real filename extension problem

Posted: 15 Nov 2023 15:55
by Aryfir
What about using only one line on your filename.rules.conf:

Code: Select all

allow       \.shp\.xml$     -          -
(the spaces between the fields must be TAB characters and not SPACES)
and delete the others (prevents MailScanner from having problems)

CMIIW, if your file is on rar, add that line too on archives.filename.rules.conf

Re: Attempt to hide real filename extension problem

Posted: 15 Nov 2023 17:07
by omer
Hello,

Thank you for your help.

When I edited this file "archives.filename.rules.conf", the rule worked.

Thank you.