Releasing Quarantined Message in Mailscanner
Well this one had me stumped.
A message with a zip file attachment was blocked and held in the Mailscanner quarantine.
Going into the Mailwatch system, and releasing it - it immediately gets blocked and quarantined again.
So - whitelist the sender - still gets blocked. You can see the ‘WL’ above showing that it’s whitelisted, but still blocked as ‘Bad Content’.
Check the Mailscanner conf files - all looks ok - still gets blocked.
Turns out that in my Mailscanner.conf, the settings for archives.filename and archives.filetype point direct to the relevant archives.rules.conf:
Archives: Filename Rules = %etc-dir%/archives.filename.rules.conf Archives: Filetype Rules = %etc-dir%/archives.filetype.rules.conf
For standard Filename and Filetype Rules - it’s different:
Filename Rules = %rules-dir%/filename.rules.rules Filetype Rules = %rules-dir%/filetype.rules.rules
These two rules files, differentiate between messages from the localhost/postmaster and other addresses.
There were no such options for the Archive filename and filentype - so here’s the changes I made:
In Mailscanner.conf:
Archives: Filename Rules = %rules-dir%/archives.filename.rules.rules Archives: Filetype Rules = %rules-dir%/archives.filetype.rules.rules
In %rules-dir%/archives.filename.rules.rules:
Send the localhost/postmaster to %etc-dir%/archives.filename.no.rules.conf
Send the default to the original %etc-dir%/archives.filename.rules.conf
In %rules-dir%/archives.filetype.rules.rules:
Send the localhost/postmaster to %etc-dir%/archives.filetype.no.rules.conf
Send the default to the original %etc-dir%/archives.filetype.rules.conf
The rules files are the originals, the no.rules files simply contain:
allow . - -
hope this helps you solve the problem of retrieving quarantined files with attachments from Mailscanner.
cheers,
Paul.
Connect on Facebook
Follow on Twitter
Discover on DandyID