> From my log:
> Feb 9 15:56:05 mail amavis[32389]: (32389-19) p004 1 Content-Type:
> multipart/mixed
> Feb 9 15:56:05 mail amavis[32389]: (32389-19) p005 1/1 Content-Type:
> multipart/alternative
> Feb 9 15:56:05 mail amavis[32389]: (32389-19) p001 1/1/1 Content-Type:
> text/plain, size: 11 B, name:
> Feb 9 15:56:05 mail amavis[32389]: (32389-19) p002 1/1/2 Content-Type:
> text/html, size: 708 B, name:
> Feb 9 15:56:05 mail amavis[32389]: (32389-19) p003 1/2 Content-Type:
> application/octet-stream, size: 4602930 B, name: 20091211_1553.ZIP
> Feb 9 15:56:06 mail amavis[32389]: (32389-19) do_unzip: p003, members
> of zero length, archive retained
> Feb 9 15:56:07 mail amavis[32389]: (32389-19) p.path BANNED:1
> [email protected]: "P=p004,L=1,M=multipart/mixed |
> P=p003,L=1/2,M=application/octet-stream,T=zip,N=20091211_1553.ZIP |
> P=p060,L=1/2/55,T=exe,T=dll,N=20091211_1553/Bin/COPRA.COPRA6.HL7.QRS.dl
> l", matching_key="(?i-
> xsm:\\.[^./]{3}\\.(exe|vbs|pif|scr|bat|cmd|com|dll)\\.?$)"
> Feb 9 15:56:12 mail amavis[32389]: (32389-19) Blocked BANNED
> (.exe,.dll,20091211_1553/Bin/COPRA.COPRA6.HL7.QRS.dll), [195.4.92.96]
> [194.97.107.139] <[email protected]> -> <[email protected]>,
> Message-ID: <[email protected]>,
> mail_id: Dq1Zv1DHmB8Z, Hits: -, size: 6301724, 6661 ms
This rule:
"(?i-xsm:\\.[^./]{3}\\.(exe|vbs|pif|scr|bat|cmd|com|dll)\\.?$)"
Matches .exe, .dll, .pif etc. files, thereby it matches the
20091211_1553/Bin/COPRA.COPRA6.HL7.QRS.dll file contained into the zip.
Giampaolo
>
> --
> Ralf Hildebrandt
> Geschäftsbereich IT | Abteilung Netzwerk
> Charité - Universitätsmedizin Berlin
> Campus Benjamin Franklin
> Hindenburgdamm 30 | D-12203 Berlin
> Tel. +49 30 450 570 155 | Fax: +49 30 450 570 962
> [email protected] | http://www.charite.de
>
>
> -----------------------------------------------------------------------
> -------
> The Planet: dedicated and managed hosting, cloud storage, colocation
> Stay online with enterprise data centers and the best network in the
> business
> Choose flexible plans and management services without long-term
> contracts
> Personal 24x7 support from experience hosting pros just a phone call
> away.
> http://p.sf.net/sfu/theplanet-com
> _______________________________________________
> AMaViS-user mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/amavis-user
> AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
> AMaViS-HowTos:http://www.amavis.org/howto/
------------------------------------------------------------------------------
The Planet: dedicated and managed hosting, cloud storage, colocation
Stay online with enterprise data centers and the best network in the business
Choose flexible plans and management services without long-term contracts
Personal 24x7 support from experience hosting pros just a phone call away.
http://p.sf.net/sfu/theplanet-com
_______________________________________________
AMaViS-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/
