1 Topic by 77

  • 77
  • Member
  • Offline
  • Registered: 2016-04-08
  • Posts: 46

Topic: Some attachments are not getting through

==== REQUIRED BASIC INFO OF YOUR IREDMAIL SERVER ====
- iRedMail version (check /etc/iredmail-release): 1.3.1
- Deployed with iRedMail Easy or the downloadable installer? Easy
- Linux/BSD distribution name and version: Ybuntu 20 LTS
- Store mail accounts in which backend (LDAP/MySQL/PGSQL): Mysql
- Web server (Apache or Nginx): Nginx
- Manage mail accounts with iRedAdmin-Pro? Yes
- [IMPORTANT] Related original log or error message is required if you're experiencing an issue.
====

Some attachments are stopping emails from being delivered.
I am not receiving any errors, the dashboard indicates that the email has been sent, and it is not being quarantined.

it is not caused by the attachment size
it is not caused by the attachment file type
it is not caused by the mail client

Please advise

----

Spider Email Archiver: On-Premises, lightweight email archiving software developed by iRedMail team. Supports Amazon S3 compatible storage and custom branding.

2 Reply by ZhangHuangbin

  • ZhangHuangbin
  • ZhangHuangbin
  • iRedMail Developers
  • Offline
  • Registered: 2009-05-06
  • Posts: 31,088

Re: Some attachments are not getting through

77 wrote:

Some attachments are stopping emails from being delivered.

Any related Postfix/Amavisd log to indicate the "stopping"?

3 Reply by 77

  • 77
  • Member
  • Offline
  • Registered: 2016-04-08
  • Posts: 46

Re: Some attachments are not getting through

This is what I found:

Oct 21 12:40:45 email amavis[163786]: (163786-18) Blocked BANNED (.exe,Tile-209537.iwa) {DiscardedInternal}, ORIGINATING LOCAL [31.166.67.11]:56544 [31.166.67.11] ESMTP/ESMTP <jasier@77-m.com> -> <hilal@77-m.com>, (ESMTPSA://[31.166.67.11]:56544), Queue-ID: 4CGQTZ0vSLz18J6m, Message-ID: <2CC8A4F6-DEA0-46E4-A4D7-BB1C2F5BE67F@77-m.com>, mail_id: t8FXPvg4hwXx, b: z4pEYfRs6, Hits: -, size: 8206244, Subject: "Fwd: (2 )Oct 2020 Payroll", From: <jasier@77-m.com>, X-Mailer: Apple_Mail_(2.3608.120.23.2.4), helo=[192.168.1.154], b.key=(?^mix:T=(9|386|LeChiffre|aaa|abc|aepl|ani|aru|atm|aut|b64|bat|bhx|bkd|blf|bll|bmw|boo|bps|bqf|breaking_bad|buk|bup|bxz|cc|ccc|ce0|ceo|cfxxe|chm|cih|cla|class|cmd|com|cpl|crinf|crjoker|crypt|cryptolocker|cryptowall|ctbl|cxq|cyw|dbd|delf|dev|dlb|dli|dll|dllx|dom|drv|dx|dxz|dyv|dyz|ecc|exe|exe-ms|exe1|exe_renamed|exx|ezt|ezz|fag|fjl|fnr|fuj|good|gzquar|hlp|hlw|hqx|hsq|hts|iva|iws|jar|js|kcd|keybtc@inbox_com|let|lik|lkh|lnk|locky|lok|lol!|lpaq5|magic|mfu|micro|mim|mjg|mjz|nls|oar|oc...
Oct 21 12:40:45 email amavis[163786]: (163786-18) ...x|osa|ozd|pcx|pgm|php2|php3|pid|pif|plc|pr|pzdc|qit|qrn|r5a|rhk|rna|rsc_tmp|s7p|scr|shs|ska|smm|smtmp|sop|spam|ssy|swf|sys|tko|tps|tsa|tti|ttt|txs|upa|uu|uue|uzy|vb|vba|vbe|vbs|vbx|vexe|vxd|vzr|wlpginstall|ws|wsc|wsf|wsh|wss|xdu|xir|xlm|xlv|xnt|xnxx|xtbl|xxe|xxx|xyz|zix|zvz|zzz)(,|\\t)), b.com=(?^mix:T=(9|386|LeChiffre|aaa|abc|aepl|ani|aru|atm|aut|b64|bat|bhx|bkd|blf|bll|bmw|boo|bps|bqf|breaking_bad|buk|bup|bxz|cc|ccc|ce0|ceo|cfxxe|chm|cih|cla|class|cmd|com|cpl|crinf|crjoker|crypt|cryptolocker|cryptowall|ctbl|cxq|cyw|dbd|delf|dev|dlb|dli|dll|dllx|dom|drv|dx|dxz|dyv|dyz|ecc|exe|exe-ms|exe1|exe_renamed|exx|ezt|ezz|fag|fjl|fnr|fuj|good|gzquar|hlp|hlw|hqx|hsq|hts|iva|iws|jar|js|kcd|keybtc@inbox_com|let|lik|lkh|lnk|locky|lok|lol!|lpaq5|magic|mfu|micro|mim|mjg|mjz|nls|oar|ocx|osa|ozd|pcx|pgm|php2|php3|pid|pif|plc|pr|pzdc|qit|qrn|r5a|rhk|rna|rsc_tmp|s7p|scr|shs|ska|smm|smtmp|sop|spam|ssy|swf|sys|tko|tps|tsa|tti|ttt|txs|upa|uu|uue|uzy|vb|vba|vbe|vbs|vbx|ve...
Oct 21 12:40:45 email amavis[163786]: (163786-18) ...xe|vxd|vzr|wlpginstall|ws|wsc|wsf|wsh|wss|xdu|xir|xlm|xlv|xnt|xnxx|xtbl|xxe|xxx|xyz|zix|zvz|zzz)(,|\\t)), b.rhs=DISCARD, b.parts=P=p023,L=1,M=multipart/alternative | P=p024,L=1/2,M=multipart/mixed | P=p003,L=1/2/2,M=application/octet-stream,T=zip,N=77AppsPayrollTemplate.pages | P=p146,L=1/2/2/122,T=exe,N=Tile-209537.iwa, P=p023,L=1,M=multipart/alternative | P=p024,L=1/2,M=multipart/mixed | P=p003,L=1/2/2,M=application/octet-stream,T=zip,N=77AppsPayrollTemplate.pages | P=p193,L=1/2/2/169,T=exe,N=DataList-185121.iwa, ..., 4487 ms

Oct 21 12:40:45 email postfix/amavis/smtp[176711]: 4CGQTZ0vSLz18J6m: to=<hilal@77-m.com>, relay=127.0.0.1[127.0.0.1]:10026, delay=12, delays=7.4/0/0/4.5, dsn=2.7.0, status=sent (250 2.7.0 Ok, discarded, id=163786-18 - BANNED: .exe,Tile-209537.iwa)

4 Reply by ZhangHuangbin

  • ZhangHuangbin
  • ZhangHuangbin
  • iRedMail Developers
  • Offline
  • Registered: 2009-05-06
  • Posts: 31,088

Re: Some attachments are not getting through

It says "Blocked BANNED". It's blocked due to contain banned file type (".exe" in your case).
You can manage quarantined emails with iRedAdmin-Pro, go to "System -> Quarantined Mails".

5 Reply by 77

  • 77
  • Member
  • Offline
  • Registered: 2016-04-08
  • Posts: 46

Re: Some attachments are not getting through

Thanks for the response. The file type is actually an macOS file format called .pages and not an .exe
and it does not show up in the Quarantined Emails. Please advise

6 Reply by ZhangHuangbin

  • ZhangHuangbin
  • ZhangHuangbin
  • iRedMail Developers
  • Offline
  • Registered: 2009-05-06
  • Posts: 31,088

Re: Some attachments are not getting through

77 wrote:

BANNED: .exe,Tile-209537.iwa

According to Amavisd log, it's file named "Tile-209537.iwa" (or extracted).

You can unban it by updating Amavisd config file.

7 Reply by 77

  • 77
  • Member
  • Offline
  • Registered: 2016-04-08
  • Posts: 46

Re: Some attachments are not getting through

Thank you for that. it seems .iwa is a macOS file type. Can you please help me with the syntax as I am not familiar with Amasvid.

8 Reply by ZhangHuangbin

  • ZhangHuangbin
  • ZhangHuangbin
  • iRedMail Developers
  • Offline
  • Registered: 2009-05-06
  • Posts: 31,088

Re: Some attachments are not getting through

In Amavisd config file /etc/amavis/conf.d/50-user, find "$banned_namepath_re" and add a new "qr" line like below BEFORE other rules:

$banned_namepath_re = new_RE(
    [qr'N=.*\.iwa$' => 0],
    ...
);

Restarting amavisd service is required.

9 Reply by 77

  • 77
  • Member
  • Offline
  • Registered: 2016-04-08
  • Posts: 46

Re: Some attachments are not getting through

Thank you so much. its working now