1

Topic: How to block extension?

Hello,
i am using debian 5 with iredmail 0.7.3, and want to block specific mail exstension like exe.

I can sucessfully find a "BANNED" mail with the exe attachement in the mail.log

Dec 29 19:41:54 mail amavis[4445]: (04445-01) Passed BANNED (multipart/mixed | application/octet-stream,.exe,.exe-ms,test.exe), LOCAL [xxx.171.47.xxx] [xxx.13.14.xxx] <xy@xxx.net> -> <yx@xxx.org>, quarantine: G/banned-G6FSpMMBWYrd, Message-ID: <web-1883659@xx.xx.xx>, mail_id: G6FSpMMBWYrd, Hits: -, size: 207745, queued_as: 726A66FA3791, 191 ms

     but the mail is not getting blocked. Can you tell me why?

     Here are the 20-debian_defaults that I've set:

$final_virus_destiny      = D_DISCARD; 
$final_banned_destiny     = D_REJECT;   
$final_spam_destiny       = D_BOUNCE;
$final_bad_header_destiny = D_PASS;

$banned_filename_re = new_RE(
  qr'\.[^./]*\.(exe|vbs|pif|scr|bat|cmd|com|cpl|dll)\.?$'i,
  qr'\{[0-9a-f]{8}(-[0-9a-f]{4}){3}-[0-9a-f]{12}\}?'i, # Windows Class ID CLSID, strict
  qr'^application/x-msdownload$'i,                  # block these MIME types
  qr'^application/x-msdos-program$'i,
  qr'^application/hta$'i,
  qr'.\.(exe|vbs|pif|scr|bat|cmd|com|cpl)$'i, # banned extension - basic
  qr'^\.(exe-ms)$',                       # banned file(1) types

);



   wynni

----

Spider Email Archiver: On-Premises, lightweight email archiving software developed by iRedMail team. Supports Amazon S3 compatible storage and custom branding.

2

Re: How to block extension?

Reference: http://www.iredmail.org/forum/topic645- … sdnew.html

It's a good idea to search this forum before posting. smile

3

Re: How to block extension?

Thank you for your response, but I've already read this post, and changed the $final_banned_destiny  to reject.
In my case nothing changes. I've also rebooted the deamons (amais,postfix) but no change.

Is there something other to set that these changes get enabled?