Peter,

> Several times in the past I have had the problem of files that were pgp
> signed not getting through, because in the conf file it says that files
> with attachments ending with .asc should be blocked.
>
> Jan 13 15:30:59 xxxxx.tld /usr/sbin/amavisd[14266]: (14266)
> p.path BANNED:1 [email protected]: "P=p004,L=1,M=multipart/signed |
> P=p002,L=1/2,M=application/pgp-signature,T=pgp,T=pgp.asc,N=signature.asc,A=
>C",
> matching_key="(?ix-sm:.\\.(ade|adp|app|asc|bas|bat|cab|chm|cmd|com|cpl|crt|
>csh|exe|fxp|hlp|\n
> hta|inf|ins|isp|js|jse|ksh|lnk|mda|mdb|mde|mdt|mdw|mdz|msc|msi|\n
> msp|mst|ops|pcd|pif|prf|prg|reg|scf|scr|sct|shb|shs|shb|url|vb|\n
> vbe|vbs|wsc|wsf|wsh)$)"

> Is there a way to keep the .asc files blocked but let pgp signature files
> through, or am I simply paranoid wanting to block .asc files?

You could place an allow rule before your blocking rule, e.g. based on
a file name:
  [ qr'^signature\.asc$'=> 0 ],
or based on a 'short file type':
  [ qr'^\.pgp\.asc$'=> 0 ],

I'd say that blocking a filename ending in .asc is perhaps
too paranoid. Virus scanners should be able to cover most threats.

  Mark

------------------------------------------------------------------------------
This SF.net email is sponsored by:
SourcForge Community
SourceForge wants to tell your story.
http://p.sf.net/sfu/sf-spreadtheword
_______________________________________________
AMaViS-user mailing list
[email protected] 
https://lists.sourceforge.net/lists/listinfo/amavis-user 
 AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 
 AMaViS-HowTos:http://www.amavis.org/howto/ 

Reply via email to