1 Topic by serg932 (edited by serg932 2022-05-19 23:03:28)

  • serg932
  • Member
  • Offline
  • Registered: 2022-05-17
  • Posts: 2

Topic: DBF files in the attachments are blocking

==== REQUIRED BASIC INFO OF YOUR IREDMAIL SERVER ====
- iRedMail version (check /etc/iredmail-release): 1.5.2 MARIADB edition.
- Deployed with iRedMail Easy or the downloadable installer? Installer
- Linux/BSD distribution name and version: Debian GNU/Linux 11 (bullseye)
- Store mail accounts in which backend (LDAP/MySQL/PGSQL): MariaDB (MySQL)
- Web server (Apache or Nginx): Nginx
- Manage mail accounts with iRedAdmin-Pro? Yes
- [IMPORTANT] Related original log or error message is required if you're experiencing an issue.
====
The messages that have the files with DBF extension are blocking as executable files.
How can i fix this?
Can you please share the rule that I need o add to /etc/amavis/conf.d/50-user and to what place.
The part of mail.log with the corresponding strings has attached.

Also I'm receiving the following message to postmaster:

Subject: BANNED contents (application/octet-stream,.exe,statement_40702810016000003059_20220516.dbf) in mail FROM LOCAL [127.0.0.1]:35298 <username@domainname.tld>

The message content:

No viruses were found.

Banned name:
  application/octet-stream,.exe,statement_40702810016000003059_20220516.dbf
Content type: Banned
Internal reference code for the message is 397307-05/ju-S6aUGWuU4

First upstream SMTP client IP address: [127.0.0.1] localhost

Return-Path: <user1@domain.tld>
From: user1@domain.tld
Message-ID: <33783b25ef8fc723128f44053c018124@signart.ru>
Subject: =?UTF-8?Q?=D0=B1=D0=B0=D0=BD=D0=BA_16=2E05=2E22?=
The message has been quarantined as: ju-S6aUGWuU4

The message WAS NOT relayed to:
<user2@domain.tld>:
   250 2.7.0 Ok, discarded, id=397307-05 - BANNED: application/octet-stream,.exe,statement_40702810016000003059_20220516.dbf

Return-Path: <user1@domain.tld>
Received: from localhost (localhost [127.0.0.1])
    by mail.domain.tld (Postfix) with ESMTPSA id 4L2TzK6QfHz1jvNc
    for <user2@domain.tld>; Tue, 17 May 2022 11:38:21 +0300 (MSK)
MIME-Version: 1.0
Date: Tue, 17 May 2022 11:38:21 +0300
From: user1@domain.tld
To: Roman <user2@domain.tld>
Subject: =?UTF-8?Q?=D0=B1=D0=B0=D0=BD=D0=BA_16=2E05=2E22?=
User-Agent: Roundcube Webmail
Message-ID: <33783b25ef8fc723128f44053c018124@signart.ru>
X-Sender: user1@domain.tld
Content-Type: multipart/mixed;
 boundary="=_b7d989246c90707c6c194e6c2721f424"
Post's attachments

mail.log 5.1 kb, file has never been downloaded. 

You don't have the permssions to download the attachments of this post.

----

Spider Email Archiver: On-Premises, lightweight email archiving software developed by iRedMail team. Supports Amazon S3 compatible storage and custom branding.

2 Reply by ZhangHuangbin

  • ZhangHuangbin
  • ZhangHuangbin
  • iRedMail Developers
  • Offline
  • Registered: 2009-05-06
  • Posts: 31,082

Re: DBF files in the attachments are blocking

Remove "exe" from ban rules in Amavisd config file (/etc/amavis/conf.d/50-user), then restart amavis service should fix the issue.

WARNING: It will bypass other exe files too.

3 Reply by serg932

  • serg932
  • Member
  • Offline
  • Registered: 2022-05-17
  • Posts: 2

Re: DBF files in the attachments are blocking

ZhangHuangbin wrote:

Remove "exe" from ban rules in Amavisd config file (/etc/amavis/conf.d/50-user), then restart amavis service should fix the issue.

WARNING: It will bypass other exe files too.

Thank you for the answer.

Do you mean that there is no way to block exe files and pass dbf files ?

4 Reply by Cthulhu

  • Cthulhu
  • Member
  • Offline
  • Registered: 2019-06-04
  • Posts: 907

Re: DBF files in the attachments are blocking

well its is the same:

application/octet-stream

.dbf is actually an executable dBase file, so it is blocked by default

you can zip them with an password, unchecked files should still pass without a problem