Topic: How to block extension?
Hello,
i am using debian 5 with iredmail 0.7.3, and want to block specific mail exstension like exe.
I can sucessfully find a "BANNED" mail with the exe attachement in the mail.log
Dec 29 19:41:54 mail amavis[4445]: (04445-01) Passed BANNED (multipart/mixed | application/octet-stream,.exe,.exe-ms,test.exe), LOCAL [xxx.171.47.xxx] [xxx.13.14.xxx] <xy@xxx.net> -> <yx@xxx.org>, quarantine: G/banned-G6FSpMMBWYrd, Message-ID: <web-1883659@xx.xx.xx>, mail_id: G6FSpMMBWYrd, Hits: -, size: 207745, queued_as: 726A66FA3791, 191 ms
but the mail is not getting blocked. Can you tell me why?
Here are the 20-debian_defaults that I've set:
$final_virus_destiny = D_DISCARD;
$final_banned_destiny = D_REJECT;
$final_spam_destiny = D_BOUNCE;
$final_bad_header_destiny = D_PASS;
$banned_filename_re = new_RE(
qr'\.[^./]*\.(exe|vbs|pif|scr|bat|cmd|com|cpl|dll)\.?$'i,
qr'\{[0-9a-f]{8}(-[0-9a-f]{4}){3}-[0-9a-f]{12}\}?'i, # Windows Class ID CLSID, strict
qr'^application/x-msdownload$'i, # block these MIME types
qr'^application/x-msdos-program$'i,
qr'^application/hta$'i,
qr'.\.(exe|vbs|pif|scr|bat|cmd|com|cpl)$'i, # banned extension - basic
qr'^\.(exe-ms)$', # banned file(1) types
);
wynni
----
Spider Email Archiver: On-Premises, lightweight email archiving software developed by iRedMail team. Supports Amazon S3 compatible storage and custom branding.